Skip to content

docs(rules_engine_2): document the SLA configuration and Risk Priority asset actions - #15788

Open
svader0 wants to merge 2 commits into
DefectDojo:bugfixfrom
svader0:docs/asset-sla-risk-priority
Open

docs(rules_engine_2): document the SLA configuration and Risk Priority asset actions#15788
svader0 wants to merge 2 commits into
DefectDojo:bugfixfrom
svader0:docs/asset-sla-risk-priority

Conversation

@svader0

@svader0 svader0 commented Aug 24, 2026

Copy link
Copy Markdown
Collaborator

Description

Documents two new Rules Engine 2.0 actions: setting an Asset's SLA configuration, and setting its Risk Priority.

Asset support is already documented. This adds the two action nodes to the node reference, and fills two gaps on the Building Rules page:

  • A field reference for Asset items. An Asset item carries no finding, test or engagement block, so the new table lists what it does carry.
  • A note about Asset type and scope. The scope picker offers what the Assets list can filter on, and Asset type is not one of those filters. To act on Assets of one type, scope broadly and add an If / Filter condition on product.asset_type, which compares the type's code rather than its display label.

Two behaviours are written down because a run reports them and they are otherwise puzzling:

  • The SLA action skips an Asset that is already being recalculated, and says it was skipped rather than changed.
  • A rule owner needs the matching configuration permission to use either action. Without it the picker is empty.

Also corrects the node count on both pages to 37.

Pairs with a DefectDojo Pro change that adds the two nodes.

Test Commands

Docs only. Built locally with Hugo, no errors, and the new headings and anchors resolve in the built HTML.

Pairs with the dojo-pro change that lets a rule act on Assets instead
of Findings.

Adds the four new nodes to Node Reference: two triggers (Manual Asset
Run, On Asset Change) and two actions (Assign SLA Configuration,
Assign Risk Priority). States plainly that an Asset already
recalculating is skipped by the SLA action, not dropped, and that
both action pickers need their matching permission or a hand-written
rule errors on the run.

Extends Building Rules with the Asset scope, the Asset item field
list, and the fact that Asset scope defaults to what the owner can
edit, not just see, unlike Finding scope.

Text only, no screenshot: the sandbox that did this work could not
reach a running app to take an honest one.
Asset scope reuses the Assets list filterset, which has no asset-type
filter, unlike name, tags, criticality, lifecycle and Organization.
States that plainly where Asset scope is introduced, and points at
the workaround: scope broadly and add an If / Filter condition on
product.asset_type instead.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant