Ctrlk
Sign UpGet a DemoContact Us
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Use security test policies to stop STO pipelines automatically

Use security test policies to stop pipelines automatically.

Once you create one or more OPA policies for your STO pipelines, you can enforce them as described in the following workflow.

  1. Go to the scan step your STO pipeline and click Advanced.

  2. Under Policy Enforcement, click Add/Modify Policy Set and add the policy set you just created.

  3. Click Apply Changes and then save the updated pipeline.

Set up notifications for pipeline failures

You have a Policy that fails the pipeline based on an OPA policy. Now you can configure your pipeline to send notification automatically whenever it fails.

For more information, go to the following:

YAML pipeline example

The following pipeline that can generate two different notifications. If the code scan detects any CRITICAL or NEW_CRITICAL issues, it sends an automated email like this:

"STO scan of sto-notification-example found the following issues:
Critical : 1
New Critical : 0
High: 0
New High: 0
Medium: 0
New Medium: 0
See https://app.harness.io/ng/#/account/XXXXXXXXXXXXXXXXXXXXXX/sto/orgs/default/"

If the scan finds any NEW_CRITICAL or NEW_HIGH issues, it stops the pipeline execution and sends an email like this:

Here's the full pipeline. Note that the policy and policy set are referenced, but not defined, in the pipeline itself.

PreviousCreate OPA policies
NextAppSec Chatbot

Last updated

Was this helpful?