Security Example - Generate violations by specific vulnerability IDs (CVEs)

{
  "name": "sec_policy",
  "description": "This is a specific cves security policy",
  "type": "security",
  "rules": [
    {
      "name": "some_cves",
      "criteria": {
        "vulnerability_ids":[
          "CVE-2022-23307",
          "CVE-2022-23305",
          "CVE-2022-23301",
          "XRAY-23432"
        ]
      },
      "actions": {
        "webhooks": [
          "sec_webhook"
        ],
        "block_download": {
          "active": true,
          "unscanned": true
        },
        "block_release_bundle_distribution": true,
        "fail_build": true,
        "notify_deployer": true,
        "notify_watch_recipients": true
      },
      "priority": 1
    }
  ]
}