Nexus Documentation - Nexus IQ Server 1.19

Our documentation site has moved. For the most current version, please see http://help.sonatype.com

TOC

Prev : 7.1. Risk and Organizational Intent
Next : 7.3. Advanced Anatomy of a Policy

7.2. Basic Policy Anatomy

A policy can be separated into three key parts:

Conditions: conditions are the if part of the if-then statements.
Constraints: a constraint is really just a way to organize multiple conditions (if-then statements). Our example only had one so far. Let’s say we decided we wanted to add that if a security issue is found and it has a CVSS of 2 or lower, only a warning should occur, but the release should not be prohibited.
Actions: actions are simply the then part of the if-then statement. Basically, what you want to have happen.

The above does a good job of telling us what makes up a policy, not all policies should be the same. To help demonstrate which policies are the most important, all policies are assigned a threat level ranging from zero to ten (0-10). This score is completely subjective and will be unique to your organization.

TOC

Prev : 7.1. Risk and Organizational Intent
Next : 7.3. Advanced Anatomy of a Policy

Documentation Nexus IQ Server 1.19

7.2. Basic Policy Anatomy