Passing the Security Rating as part of the Code Quality Testing in Cloud Manager

Question

What is the minimum threshold for passing the security rating as part of the code quality testing in Cloud Manager?

1 minor vulnerability
1 medium vulnerability
1 major vulnerability
1 critical vulnerability

@aanchal-sikka @EstebanBustamante

@arunpatidar @Shashi_Mulugu

@lukasz-m @Mahedi_Sabuj

@kautuk_sahni @Sudheer_Sundalam

@lukasz-m @Rohan_Garg

ShivamKumar · Accepted Answer

Hi @s__k__agarwal ,

The minimum threshold for passing the security rating as part of the code quality testing in Cloud Manager is 1 minor vulnerability, based on how the security ratings are defined:

Name Definition Category Failure Threshold

Security Rating

A = No vulnerabilities
B = At least 1 minor vulnerability
C = At least 1 major vulnerability
D = At least 1 critical vulnerability
E = At least 1 blocker vulnerability

Critical

< B

Since ratings drop to C or lower for major, critical, or blocker vulnerabilities (which result in a build failure), only minor vulnerabilities (rating B) allow a build to pass.

You can read more about it in detail here:
https://experienceleague.adobe.com/en/docs/experience-manager-cloud-service/content/implementing/using-cloud-manager/test-results/code-quality-testing

Thanks.

SantoshSai · Answer

Hi @s__k__agarwal,As mentioned by @shivamkumar, adding the below explanation to make the context easier to understand.In Adobe Cloud Manager for AEM as a Cloud Service, the minimum threshold for passing the security rating (code quality testing) is:Zero critical vulnerabilitiesZero major vulnerabilitiesMinor and medium vulnerabilities are tolerated - they do not fail the pipeline by default.Only critical or major security issues will fail the build.So, answering your list:VulnerabilityAllowed to Pass?1 minorAllowed1 mediumAllowed1 majorNot Allowed (fails security rating)1 criticalNot Allowed (fails security rating)In simple words:Even 1 major or 1 critical vulnerability will fail the security rating in Cloud Manager.

Vulnerability	Allowed to Pass?
1 minor	Allowed
1 medium	Allowed
1 major	Not Allowed (fails security rating)
1 critical	Not Allowed (fails security rating)

Sign up

Login with SSO

Login to the community

Login with SSO