Waiver Tasks

Process for managing waivers.

The ability to add waivers is limited based on the permissions included in the user's role.

The Waive Policy Violations permission is needed to manage waivers. Users without these permissions have the option to request a waiver by sharing an API call with a user who has the correct permissions.

Clicking on the Manage Waivers button from the Policy Violations tab inside an application composition report will navigate to the Waivers for Violation page.

A summary of the violation details, along with a list of any applicable and similar waivers is displayed.

To view a list of waivers from the Dashboard, click the Waivers tab.

This shows a list of waivers from applications or organizations you have permission to view. Click on any row to go to the Waiver Detail View and see more details about the waiver.

To view applicable waivers from the Dashboard, click on a violation in the Dashboard. To add new waivers, click on the Add Waiver ,

Filter your results by clicking the Filter button on the right side. By default, the list includes all waivers, including stale and expired waivers. To limit your results to just active and stale waivers, use the Expiration Date filter and select any option other than all.

Click on the Add Waiver button in the Applicable Waivers table to go to the Add Waiver page.

The component's name and coordinates, the selected policy, and severity are shown here. You'll also see the Constraint Name and the Conditions that the waiver will cover.

If you do not have permission to create waivers (Add Waiver option is disabled), you can send a request to the designated approver.

Click on Request Waiver from the dropdown option.

There are 2 ways to send a waiver request:

If your IQ Server instance is not configured for the Waiver Request webhook event, you will have to send your waiver request to the designated approver manually.

Copy the curl command as shown below and share it with the designated approver.

To delete a waiver, either: