Policy management

[Mat-Moo]

If you change the rules for a policy, is there a way to ger projects to re-evaluate without upload a sbom again?

[fupgang]

Probably not at the moment, as #3951 requests this feature.

[fupgang]

From the discussion in #2146:

Re-evaluation would happen in any of these cases:

Upon next SBOM upload
Upon manual reanalysis of the project
At least 1-2x a day during recurring analysis

Manual reanalysis may refer to this:

[Mat-Moo]

Yep, I thought that was doing it, but there is no way to see what is going on - a logs page to show something is being processed would be ever so helpful

[fupgang]

Sorry, it actually refers to this on the "audit vulnerabilities" tab

The above screenshot triggers a metrics update only.

[carloreggiani]

A global reapply policy feature could be useful: in case of a change in the policies, how to complete an assessment on all the project portfolios?