Skip to content

Policy Enforcement Levels

Enforcement levels are a first-class concept in INTERCEPT, allowing compliant/non-compliant (pass/fail) behavior to be associated separately from the policy logic. This enables any policy to be configured as a warning, allow exceptions, or be absolutely mandatory. These levels can be coupled to environments, allowing different uses of the same policy to have distinct enforcement levels per environment.

Enforcement Levels


FatalExceptionsConfidenceSARIF LevelDescription
truefalsehigherrorHighest-confidence, fatal issue with no exceptions
truetruehigherrorHigh-confidence, potentially fatal issue with exceptions
falsefalsehigherrorHigh-confidence, non-fatal issue with no exceptions
falsetruehighwarningHigh-confidence, non-fatal issue with exceptions
falsefalselowwarningLow-confidence, non-fatal issue with no exceptions
falsetruelownoteLowest-confidence, non-fatal issue with exceptions
falsetrueinfononeInformational finding

SARIF Level

  • error: A serious issue that very likely indicates a problem in the code.
  • warning: A potential issue that may or may not indicate a problem in the code.
  • note: An informational finding that doesn't necessarily indicate a problem.
  • none: A finding that doesn't have a severity associated with it.

WIP

This document is a work in progress. Please check back for updates.