Add, View, and Remove Waivers
- Waiver Permissions
- Viewing Waivers
- Adding a Waiver
- Requesting a Waiver
- Removing a Waiver
On this page, you'll find the basic actions for viewing, adding, requesting, and removing waivers.
The ability to add waivers is limited based on the permissions included in the user's role. The Waive Policy Violations permission is needed to add waivers. Users without this permission have the option to request a waiver by sharing an API call with a user who has the correct permissions. Read Requesting a Waiver section for details.
Review the documentation for User Management to learn how to view and edit user roles.
Manage waivers from any policy violation page or tab, or directly from the dashboard waiver view.
- Violation Details page - click on any violation in the dashboard violation view.
- Policy Violations Tab - click on a violation in the application composition report.
Fig 1: Violation details page in the dashboard violation view
Fig 2: Policy Violations tab from a violation in the Application Composition Report
Applicable Waivers for Violation
Clicking on the Manage Waivers button from the Policy Violations tab inside an application composition report will navigate to the Waivers for Violation page.
A summary of the violation details, along with a list of any applicable waivers and their corresponding status is displayed.
NEW IN RELEASE 148 Viewing Waivers from the Dashboard
To view a list of waivers from the Dashboard, click the Waivers tab.
This shows a list of waivers from applications or organizations you have permissions to view. Click on any row to go to the Waiver Detail View and see more details about the waiver.
Filtering Dashboard for Stale Waivers
Filter your results by clicking the Filter button on the right side. By default, the list includes all waivers, including stale and expired waivers. To limit your results to just active and stale waivers, use the Expiration Date filter and select any option other than all.
Adding a Waiver
Click on the Add Waiver button in the Applicable Waivers table to go to the Add Waiver page.
The component's name and coordinates, the selected policy, and severity is shown here. You'll also see the Constraint Name and the Conditions that the waiver will cover.
Refer to the table below to configure the waiver.
Choose the scope where the waiver is applied.
For Firewall waivers, choose from the current Repository, All Repositories, or Root Organization.
Choose the component scope for which the waiver applies to. All versions and all components include future components which have not been released.
Select an expiration duration for this waiver. Waivers expire on the end of the given day.
Add reference details to the waiver. Common use cases:
|The current user to log with the request.|
NEW IN RELEASE 165 Requesting a Waiver
If you do not have the permission to create waivers (Add Waiver option) is disabled, you can send a request to the designated approver.
Click on Request Waiver from the dropdown option.
There are 2 ways to send a waiver request:
- Automatic Send with Submit button
- Manual Send
If your IQ Server instance is not configured for the Waiver Request webhook event, you will have to send your waiver request to the designated approver manually.
Copy the curl command as shown below and share it with the designated approver.
Removing a Waiver
To delete a waiver, either:
- Go to the Waiver Detail View and click Delete Waiver at the bottom right.
- Go to the Waivers for Violation Page and click the Delete icon on the right side of a row.
- Go to the View Existing Waivers pullout and click the Delete icon on the right side of the row.