Nexus Documentation - Nexus IQ Server 1.16

Our documentation site has moved. For the most current version, please see http://help.sonatype.com

TOC

8.2. Basic Policy Anatomy

With a better understanding policy in the context of Sonatype CLM, let’s take a slightly closer look at the basic policy anatomy, there are actually three key parts to a policy:

Conditions: conditions are the if part of the if-then statements.
Constraints: a constraint is really just a way to organize multiple conditions (if-then statements). Our example only had one so far. Let’s say we decided we wanted to add that if a security issue is found and it has a CVSS of 2 or lower, only a warning should occur, but the release should not be prohibited.
Actions: actions are simply the then part of the if-then statement. Basically, what you want to have happen.

The above does a good job of telling us what makes up a policy in Sonatype CLM, but you are likely thinking, not all policies should be the same, I need a way to demonstrate which policies are the most important. We thought that too, and that is why in Sonatype CLM, all policies are assigned a threat level ranging from zero to ten (0-10). This score is completely subjective and will be unique in your organization.

TOC

Documentation Nexus IQ Server 1.16

8.2. Basic Policy Anatomy