How do I create a CI/CD policy for vulnerabilities?

To create a CI/CD Policy for vulnerabilities follow the steps below:

  1. Login into I3 Portal
  2. Using the left floating menu navigate to Governance –> Policies
  3. Click on New Policy button
  4. Specify a Policy Name, select the Policy Type as Vulnerabilities and click Next
  5. Select the Policy Template as No ‘Do Now’ Impacts and click Next
  6. As part of policy configuration:
    • Specify the exit code that should be returned by TWIGS if any Do Now impacts are present i.e. policy evaluation failed. In your CI/CD pipeline where you launch TWIGS, you can check for this exit code and take appropriate actions.
    • Enable this policy for use and click Next
  7. Review the policy and click Create Policy button