BCH 1033: More alert checks for vulnerabilities.

[jonathandavies-CS]

No description provided.

[Copilot]

Pull Request Overview

This PR implements comprehensive vulnerability checking policies for security alerts. It adds new OPA policies to enforce governance rules around vulnerability management including patch availability, dismissal dates, dismissal counts, and authorization requirements.

Key changes:

• Adds four new vulnerability policies with comprehensive test coverage
• Restructures existing vulnerability count policies from legacy format to new structure
• Updates example JSON files to match new input format with alerts array and security team members

Reviewed Changes

Copilot reviewed 28 out of 28 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
policies/vulnerability_patch_available/	New policy to prevent dismissing vulnerabilities when patches are available
policies/vulnerability_dismissal_date/	New policy to limit age of dismissed vulnerabilities to 90 days
policies/vulnerability_dismissal_count/	New policy to limit total number of dismissed vulnerabilities to 10
policies/vulnerabilities_dismissed_by_security_team/	New policy requiring security team authorization for dismissals
policies/utils/time_ext/	Utility functions for working day calculations
policies/*_vulnerabilities_dismissal/	New time-based dismissal policies for critical/high/medium/low severity levels
policies/*_vulnerabilities_count/	Restructured count policies from legacy format
examples/	Updated JSON examples to match new input structure

Comments suppressed due to low confidence (2)

policies/vulnerability_dismissal_count/vulnerability_dimissal_count_test.rego:1

• The function name contains a typo: 'dimissed' should be 'dismissed'.

package vulnerability_dismissal_count_test

policies/vulnerability_dismissal_count/vulnerability_dimissal_count_test.rego:1

• The function name contains a typo: 'dimissed' should be 'dismissed'.

package vulnerability_dismissal_count_test

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}