Trusera Policy icon

Trusera Policy

Evaluate AI-BOM scan results against a security policy

Trusera Policy

AI-generated

Summary

Evaluates AI-BOM scan results against a security policy, returning whether the scan passes and any violations based on configurable thresholds for critical/high components, risk score, blocked providers, and blocked flags.

Inputs

  • scanResultField — Field containing the scan result. If empty, the entire input JSON is used.

Output shape

Each input item yields an output item with: passed (boolean), violations (string[]), policyApplied (object), totalComponents (number). Invalid scan results produce passed:false and a violation explaining the problem.

The node does not filter items; it returns the same number of items it receives.

Examples

Example 1: Validate a Trusera AI-BOM scan, allowing zero critical components, unlimited high components, and blocking the 'OpenAI' provider.

Set Max Critical = 0, Max High = -1, Max Risk Score = -1, Block Providers = 'OpenAI'.

Links

Discussion