Creating and deleting security rules

Security rules are created based on specified parameters. The parameter set depends on the type of security issue.

Creating a security rule

To create a security rule, follow these steps:

1. Go to the Security rules section.
2. Select Add rule.
3. Complete the form with the following information:
   • name;
   • security check type;
   • tool type;
   • tool name;
   • criticality level;
   • CVSS score (v.2, v.3x, v.4, v.?);
   • exploitability;
   • category;
   • source;
   • source branch/tag;
   • file;
   • line;
   • matching code;
   • library name;
   • library version;
   • CVE;
   • CWE;
   • assignee;
   • issue status;
   • scope—all projects or a specific project/scanning source;
   • expiration time.
4. If you select Specific project/source, also provide the following information:
   • project;
   • project layer;
   • scanning sources.
5. Select Create.

The system applies the rule to all new and existing issues that match the criteria.

Activating a security rule

To activate a security rule, follow these steps:

1. Go to the Security rules section.
2. Select the additional actions button () next to the required rule.
3. Select Edit.
4. In the window that opens, set the rule's expiration time, if needed.
5. Select the status to assign to the issue after the rule expires.
6. Select Activate.

The system activates the rule and applies it when the specified conditions match.

Deleting security rules

To delete one security rule, follow these steps:

1. Go to the Security rules section.
2. Select the additional actions button () next to the required security rule.
3. Select Delete.
4. In the modal window that opens, confirm that you want to delete the security rule.

To delete multiple security rules, follow these steps:

1. Select the security rules using the checkboxes ().
2. Select the delete button () above the rules table.
3. In the modal window that opens, confirm that you want to delete the security rules.