REQ 023

REQ-023: Full DT mode cannot disable the security gate

Requirement

full Dependency-Track reporting mode shall refuse to disable the Critical/High security gate.

Rationale

A reporting mode whose entire purpose is enforcing a vulnerability policy should not be configurable into silently not enforcing it.

Fit Criterion

Resolve-DependencyTrackPolicy throws if $Mode -eq "full" and $SecurityGate -eq "0".

Verification

Code review of Build-Sbom.ps1's Resolve-DependencyTrackPolicy function.

Source

Software-Requirements-Specification

Priority

High

TestID

TEST-023

TestArtifact

Code review of the SecurityGate -eq "0" rejection

CodeRef

Build-Sbom.ps1 Resolve-DependencyTrackPolicy module

Status

Verified (manual)