DependencyTrack / DependencyTrack/dependency-track

Add "and"/"or" operator to the Policy conditions

Open
#4,765 5 comments 1 reaction 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

At this moment there is no operator selection possible in the policy conditions. It is also not clear if the default is AND or OR. It seems to be an OR.

### Proposed Behavior

It would be good to add a dropdown with the choice of operator. For example you want to have a policy where the EPSS score > x AND severity is Y

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.