Xray Policy and Watch

Xray Policy and Watch

Create a security policy and a watch that enforces it on a repository.

1. Create a security policy with a rule that blocks downloads and fails builds at or above the supplied minimum severity.
2. Create a watch that monitors the repository and assigns the newly created security policy.
3. Read the watch back to confirm it was created with the assigned policy.

What you'll need to have ready

• policyName: The name of the security policy to create.
• watchName: The name of the watch to create.
• repoKey: The repository key the watch will monitor.
• minSeverity: The minimum severity that triggers the policy (Low, Medium, High, Critical).

For your developer

Arazzo workflow jfrog:policy-and-watch, 3 operations: postV2Policies → createWatch → getWatch. Specs on APIs.io.