--- title: "Create Vulnerability Policies" method: POST path: "/api/v2/VulnerabilityPolicies" tags: ["VulnerabilityPolicies"] --- # Create Vulnerability Policies `POST /api/v2/VulnerabilityPolicies` Create a vulnerability policy by specifying parameters in the request body when invoking the following endpoint: > `POST https://YourAccount.lacework.net/api/v2/VulnerabilityPolicies` ## Headers - `Authorization` string, required - `Content-Type` string, required ## Request body - union - VulnerabilityPoliciesDockerFileCreateSchema — Docker File Policy - `policyType` 'DockerFile', required — The policy type such as `DockerFile`, `DockerConfig`, or `Image`. - `policyName` string, required — Name of the policy. - `policyEvalType` 'local' — The evaluation type to use for the policy. The default value is `local`. - `severity` 'Critical' | 'High' | 'Medium' | 'Low' | 'Info', required — The severity level of the policy; Info, Low, Medium, High, or Critical. - `failOnViolation` 0 | 1 — When sending a request, use this attribute to define what action is taken when a policy failure occurs. Set to `1` to permit container image deployment to continue even when the policy fails. Set to `0` to block container image deployment when the policy fails. - `alertOnViolation` 0 | 1 — When sending a request, set to `1` if you want to send alerts to an alert profile when a violation is detected. Set to `0` if you want to mute alerts when a violation is detected. - `state` 0 | 1, required — When sending a request, set to `1` to enable the policy. Set to `0` to disable the policy. - `filter` VulnerabilityPoliciesDockerFile, required - `rule` VulnerabilityPoliciesInternalFilter, required - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `exception` VulnerabilityPoliciesInternalFilter - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `props` object, required — The vulnerability policy's properties. - `description` string — A brief description of the policy creation. - `createdBy` string — The user who creates the policy. - `updatedBy` string — The user who updates the policy. - VulnerabilityPoliciesDockerConfigCreateSchema — Docker Config Policy - `policyType` 'DockerConfig', required — The policy type such as `DockerFile`, `DockerConfig`, or `Image`. - `policyName` string, required — Name of the policy. - `policyEvalType` 'local' — The evaluation type to use for the policy. The default value is `local`. - `severity` 'Critical' | 'High' | 'Medium' | 'Low' | 'Info', required — The severity level of the policy; Info, Low, Medium, High, or Critical. - `failOnViolation` 0 | 1 — When sending a request, use this attribute to define what action is taken when a policy failure occurs. Set to `1` to permit container image deployment to continue even when the policy fails. Set to `0` to block container image deployment when the policy fails. - `alertOnViolation` 0 | 1 — When sending a request, set to `1` if you want to send alerts to an alert profile when a violation is detected. Set to `0` if you want to mute alerts when a violation is detected. - `state` 0 | 1, required — When sending a request, set to `1` to enable the policy. Set to `0` to disable the policy. - `filter` VulnerabilityPoliciesDockerConfig, required - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` object[], required — A list of search values you want to use. - `key` string, required - `value` string, required - `props` object, required — The vulnerability policy's properties. - `description` string — A brief description of the policy creation. - `createdBy` string — The user who creates the policy. - `updatedBy` string — The user who updates the policy. - VulnerabilityPoliciesImageCreateSchema — Image Policy - `policyType` 'Image', required — The policy type such as `DockerFile`, `DockerConfig`, or `Image`. - `policyName` string, required — Name of the policy. - `policyEvalType` 'local' — The evaluation type to use for the policy. The default value is `local`. - `severity` 'Critical' | 'High' | 'Medium' | 'Low' | 'Info', required — The severity level of the policy; Info, Low, Medium, High, or Critical. - `failOnViolation` 0 | 1 — When sending a request, use this attribute to define what action is taken when a policy failure occurs. Set to `1` to permit container image deployment to continue even when the policy fails. Set to `0` to block container image deployment when the policy fails. - `alertOnViolation` 0 | 1 — When sending a request, set to `1` if you want to send alerts to an alert profile when a violation is detected. Set to `0` if you want to mute alerts when a violation is detected. - `state` 0 | 1, required — When sending a request, set to `1` to enable the policy. Set to `0` to disable the policy. - `filter` VulnerabilityPoliciesImage, required - `allowedLabelKey` VulnerabilityPoliciesFilterObject - `rule` VulnerabilityPoliciesInternalFilter, required - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `exception` VulnerabilityPoliciesInternalFilter - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `allowedTag` VulnerabilityPoliciesFilterObject - `rule` VulnerabilityPoliciesInternalFilter, required - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `exception` VulnerabilityPoliciesInternalFilter - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `props` object, required — The vulnerability policy's properties. - `description` string — A brief description of the policy creation. - `createdBy` string — The user who creates the policy. - `updatedBy` string — The user who updates the policy. - VulnerabilityPoliciesFileCreateSchema — File Policy - `policyType` 'File', required — The policy type such as `DockerFile`, `DockerConfig`, or `Image`. - `policyName` string, required — Name of the policy. - `policyEvalType` 'local' — The evaluation type to use for the policy. The default value is `local`. - `severity` 'Critical' | 'High' | 'Medium' | 'Low' | 'Info', required — The severity level of the policy; Info, Low, Medium, High, or Critical. - `failOnViolation` 0 | 1 — When sending a request, use this attribute to define what action is taken when a policy failure occurs. Set to `1` to permits container image deployment to continue even when the policy fails. Set to `0` to blocks container image deployment when the policy fails. - `alertOnViolation` 0 | 1 — When sending a request, set to `1` if you want to send alerts to an alert profile when a violation is detected. Set to `0` if you want to mute alerts when a violation is detected. - `state` 0 | 1, required — When sending a request, set to `1` to enable the policy. Set to `0` to disable the policy. - `filter` VulnerabilityPoliciesFile, required - `fileType` 'EXE' | 'DockerFile' | 'ALL', required — The file type such as `EXE`, `DockerFile`. - `pathPrefix` string, required — The file path's prefix such as `LW_FIM`. - `fileNameFilter` VulnerabilityPoliciesFilterObject, required - `rule` VulnerabilityPoliciesInternalFilter, required - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `exception` VulnerabilityPoliciesInternalFilter - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `fileContentFilter` VulnerabilityPoliciesFilterObject, required - `rule` VulnerabilityPoliciesInternalFilter, required - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `exception` VulnerabilityPoliciesInternalFilter - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `filePermissionFilter` object, required — Filter by file permissions. - `executable` VulnerabilityPoliciesPermissionFilter, required - `allow` number, required — When sending a request, set to 1 to enable the executable permission. Set to 0 to disable the executable permission. - `exception` VulnerabilityPoliciesInternalFilter - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `writable` VulnerabilityPoliciesPermissionFilter, required - `allow` number, required — When sending a request, set to 1 to enable the executable permission. Set to 0 to disable the executable permission. - `exception` VulnerabilityPoliciesInternalFilter - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `symlink` VulnerabilityPoliciesPermissionFilter, required - `allow` number, required — When sending a request, set to 1 to enable the executable permission. Set to 0 to disable the executable permission. - `exception` VulnerabilityPoliciesInternalFilter - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `setUid` VulnerabilityPoliciesPermissionFilter, required - `allow` number, required — When sending a request, set to 1 to enable the executable permission. Set to 0 to disable the executable permission. - `exception` VulnerabilityPoliciesInternalFilter - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `setGid` VulnerabilityPoliciesPermissionFilter, required - `allow` number, required — When sending a request, set to 1 to enable the executable permission. Set to 0 to disable the executable permission. - `exception` VulnerabilityPoliciesInternalFilter - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `props` object, required — The vulnerability policy's properties. - `description` string — A brief description of the policy creation. - `createdBy` string — The user who creates the policy. - `updatedBy` string — The user who updates the policy. - VulnerabilityPoliciesCVECreateSchema — CVE Policy - `policyType` 'CVE', required — The policy type such as `DockerFile`, `DockerConfig`, or `Image`. - `policyName` string, required — Name of the policy. - `policyEvalType` 'local' — The evaluation type to use for the policy. The default value is `local`. - `severity` 'Critical' | 'High' | 'Medium' | 'Low' | 'Info', required — The severity level of the policy; Info, Low, Medium, High, or Critical. - `failOnViolation` 0 | 1 — When sending a request, use this attribute to define what action is taken when a policy failure occurs. Set to `1` to permits container image deployment to continue even when the policy fails. Set to `0` to blocks container image deployment when the policy fails. - `alertOnViolation` 0 | 1 — When sending a request, set to `1` if you want to send alerts to an alert profile when a violation is detected. Set to `0` if you want to mute alerts when a violation is detected. - `state` 0 | 1, required — When sending a request, set to `1` to enable the policy. Set to `0` to disable the policy. - `filter` VulnerabilityPoliciesCVE, required - `cveIds` string[] — The CVE ID full name(s), such as CVE-2019-01234, CVE-2019-5678. You can specify multiple values but they will be considered as "or" values (rather than "and"). - `packageNames` string[] - `severityInfo` VulnerabilityPoliciesSeverityFilter - `allowedCounts` number, required — The number of vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. - `allowedFixable` number, required — The number of fixable vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. `0` means all fixable vulnerabilities must be addressed. - `severityLow` VulnerabilityPoliciesSeverityFilter - `allowedCounts` number, required — The number of vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. - `allowedFixable` number, required — The number of fixable vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. `0` means all fixable vulnerabilities must be addressed. - `severityMedium` VulnerabilityPoliciesSeverityFilter - `allowedCounts` number, required — The number of vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. - `allowedFixable` number, required — The number of fixable vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. `0` means all fixable vulnerabilities must be addressed. - `severityHigh` VulnerabilityPoliciesSeverityFilter - `allowedCounts` number, required — The number of vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. - `allowedFixable` number, required — The number of fixable vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. `0` means all fixable vulnerabilities must be addressed. - `severityCritical` VulnerabilityPoliciesSeverityFilter - `allowedCounts` number, required — The number of vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. - `allowedFixable` number, required — The number of fixable vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. `0` means all fixable vulnerabilities must be addressed. - `props` object, required — The vulnerability policy's properties. - `description` string — A brief description of the policy creation. - `createdBy` string — The user who creates the policy. - `updatedBy` string — The user who updates the policy. ## Response `201` No Error - object - `data` union - VulnerabilityPoliciesDockerFileResponseSchema — Docker File Policy - `policyType` 'DockerFile', required — The policy type such as `DockerFile`, `DockerConfig`, or `Image`. - `policyName` string, required — Name of the policy. - `policyEvalType` 'local' — The evaluation type to use for the policy. The default value is `local`. - `severity` 'Critical' | 'High' | 'Medium' | 'Low' | 'Info', required — The severity level of the policy; Info, Low, Medium, High, or Critical. - `failOnViolation` 0 | 1 — When sending a request, use this attribute to define what action is taken when a policy failure occurs. Set to `1` to permit container image deployment to continue even when the policy fails. Set to `0` to block container image deployment when the policy fails. - `alertOnViolation` 0 | 1 — When sending a request, set to `1` if you want to send alerts to an alert profile when a violation is detected. Set to `0` if you want to mute alerts when a violation is detected. - `state` 0 | 1, required — When sending a request, set to `1` to enable the policy. Set to `0` to disable the policy. - `filter` VulnerabilityPoliciesDockerFile, required - `rule` VulnerabilityPoliciesInternalFilter, required - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `exception` VulnerabilityPoliciesInternalFilter - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `props` object, required — The vulnerability policy's properties. - `description` string — A brief description of the policy creation. - `createdBy` string — The user who creates the policy. - `updatedBy` string — The user who updates the policy. - `policyGuid` string — Vulnerability Policy ID - `createdTime` string — The time and date when the vulnerability policy was created. - `updatedTime` string — The time and date when the vulnerability policy was last updated. - `isDefault` 0 | 1 — Returns `1` if this is a default vulnerability policy. Otherwise, returns `0`. - VulnerabilityPoliciesDockerConfigResponseSchema — Docker Config Policy - `policyType` 'DockerConfig', required — The policy type such as `DockerFile`, `DockerConfig`, or `Image`. - `policyName` string, required — Name of the policy. - `policyEvalType` 'local' — The evaluation type to use for the policy. The default value is `local`. - `severity` 'Critical' | 'High' | 'Medium' | 'Low' | 'Info', required — The severity level of the policy; Info, Low, Medium, High, or Critical. - `failOnViolation` 0 | 1 — When sending a request, use this attribute to define what action is taken when a policy failure occurs. Set to `1` to permit container image deployment to continue even when the policy fails. Set to `0` to block container image deployment when the policy fails. - `alertOnViolation` 0 | 1 — When sending a request, set to `1` if you want to send alerts to an alert profile when a violation is detected. Set to `0` if you want to mute alerts when a violation is detected. - `state` 0 | 1, required — When sending a request, set to `1` to enable the policy. Set to `0` to disable the policy. - `filter` VulnerabilityPoliciesDockerConfig, required - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` object[], required — A list of search values you want to use. - `key` string, required - `value` string, required - `props` object, required — The vulnerability policy's properties. - `description` string — A brief description of the policy creation. - `createdBy` string — The user who creates the policy. - `updatedBy` string — The user who updates the policy. - `policyGuid` string — Vulnerability Policy ID - `createdTime` string — The time and date when the vulnerability policy was created. - `updatedTime` string — The time and date when the vulnerability policy was last updated. - `isDefault` 0 | 1 — Returns `1` if this is a default vulnerability policy. Otherwise, returns `0`. - VulnerabilityPoliciesImageResponseSchema — Image Policy - `policyType` 'Image', required — The policy type such as `DockerFile`, `DockerConfig`, or `Image`. - `policyName` string, required — Name of the policy. - `policyEvalType` 'local' — The evaluation type to use for the policy. The default value is `local`. - `severity` 'Critical' | 'High' | 'Medium' | 'Low' | 'Info', required — The severity level of the policy; Info, Low, Medium, High, or Critical. - `failOnViolation` 0 | 1 — When sending a request, use this attribute to define what action is taken when a policy failure occurs. Set to `1` to permit container image deployment to continue even when the policy fails. Set to `0` to block container image deployment when the policy fails. - `alertOnViolation` 0 | 1 — When sending a request, set to `1` if you want to send alerts to an alert profile when a violation is detected. Set to `0` if you want to mute alerts when a violation is detected. - `state` 0 | 1, required — When sending a request, set to `1` to enable the policy. Set to `0` to disable the policy. - `filter` VulnerabilityPoliciesImage, required - `allowedLabelKey` VulnerabilityPoliciesFilterObject - `rule` VulnerabilityPoliciesInternalFilter, required - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `exception` VulnerabilityPoliciesInternalFilter - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `allowedTag` VulnerabilityPoliciesFilterObject - `rule` VulnerabilityPoliciesInternalFilter, required - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `exception` VulnerabilityPoliciesInternalFilter - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `props` object, required — The vulnerability policy's properties. - `description` string — A brief description of the policy creation. - `createdBy` string — The user who creates the policy. - `updatedBy` string — The user who updates the policy. - `policyGuid` string — Vulnerability Policy ID - `createdTime` string — The time and date when the vulnerability policy was created. - `updatedTime` string — The time and date when the vulnerability policy was last updated. - `isDefault` 0 | 1 — Returns `1` if this is a default vulnerability policy. Otherwise, returns `0`. - VulnerabilityPoliciesFileResponseSchema — File Policy - `policyType` 'File', required — The policy type such as `DockerFile`, `DockerConfig`, or `Image`. - `policyName` string, required — Name of the policy. - `policyEvalType` 'local' — The evaluation type to use for the policy. The default value is `local`. - `severity` 'Critical' | 'High' | 'Medium' | 'Low' | 'Info', required — The severity level of the policy; Info, Low, Medium, High, or Critical. - `failOnViolation` 0 | 1 — When sending a request, use this attribute to define what action is taken when a policy failure occurs. Set to `1` to permits container image deployment to continue even when the policy fails. Set to `0` to blocks container image deployment when the policy fails. - `alertOnViolation` 0 | 1 — When sending a request, set to `1` if you want to send alerts to an alert profile when a violation is detected. Set to `0` if you want to mute alerts when a violation is detected. - `state` 0 | 1, required — When sending a request, set to `1` to enable the policy. Set to `0` to disable the policy. - `filter` VulnerabilityPoliciesFile, required - `fileType` 'EXE' | 'DockerFile' | 'ALL', required — The file type such as `EXE`, `DockerFile`. - `pathPrefix` string, required — The file path's prefix such as `LW_FIM`. - `fileNameFilter` VulnerabilityPoliciesFilterObject, required - `rule` VulnerabilityPoliciesInternalFilter, required - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `exception` VulnerabilityPoliciesInternalFilter - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `fileContentFilter` VulnerabilityPoliciesFilterObject, required - `rule` VulnerabilityPoliciesInternalFilter, required - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `exception` VulnerabilityPoliciesInternalFilter - `operator` 'include' | 'exclude' | 'equals' | 'notEquals', required — The search operator such as `include`, `exclude`, `equals`, or `notEquals`. - `values` string[], required — A list of search values you want to use. - `filePermissionFilter` object, required — Filter by file permissions. - `executable` VulnerabilityPoliciesPermissionFilter, required - `allow` number, required — When sending a request, set to 1 to enable the executable permission. Set to 0 to disable the executable permission. - `exception` VulnerabilityPoliciesInternalFilter - … - `writable` VulnerabilityPoliciesPermissionFilter, required - `allow` number, required — When sending a request, set to 1 to enable the executable permission. Set to 0 to disable the executable permission. - `exception` VulnerabilityPoliciesInternalFilter - … - `symlink` VulnerabilityPoliciesPermissionFilter, required - `allow` number, required — When sending a request, set to 1 to enable the executable permission. Set to 0 to disable the executable permission. - `exception` VulnerabilityPoliciesInternalFilter - … - `setUid` VulnerabilityPoliciesPermissionFilter, required - `allow` number, required — When sending a request, set to 1 to enable the executable permission. Set to 0 to disable the executable permission. - `exception` VulnerabilityPoliciesInternalFilter - … - `setGid` VulnerabilityPoliciesPermissionFilter, required - `allow` number, required — When sending a request, set to 1 to enable the executable permission. Set to 0 to disable the executable permission. - `exception` VulnerabilityPoliciesInternalFilter - … - `props` object, required — The vulnerability policy's properties. - `description` string — A brief description of the policy creation. - `createdBy` string — The user who creates the policy. - `updatedBy` string — The user who updates the policy. - `policyGuid` string — Vulnerability Policy ID - `createdTime` string — The time and date when the vulnerability policy was created. - `updatedTime` string — The time and date when the vulnerability policy was last updated. - `isDefault` 0 | 1 — Returns `1` if this is a default vulnerability policy. Otherwise, returns `0`. - VulnerabilityPoliciesCVEResponseSchema — CVE Policy - `policyType` 'CVE', required — The policy type such as `DockerFile`, `DockerConfig`, or `Image`. - `policyName` string, required — Name of the policy. - `policyEvalType` 'local' — The evaluation type to use for the policy. The default value is `local`. - `severity` 'Critical' | 'High' | 'Medium' | 'Low' | 'Info', required — The severity level of the policy; Info, Low, Medium, High, or Critical. - `failOnViolation` 0 | 1 — When sending a request, use this attribute to define what action is taken when a policy failure occurs. Set to `1` to permits container image deployment to continue even when the policy fails. Set to `0` to blocks container image deployment when the policy fails. - `alertOnViolation` 0 | 1 — When sending a request, set to `1` if you want to send alerts to an alert profile when a violation is detected. Set to `0` if you want to mute alerts when a violation is detected. - `state` 0 | 1, required — When sending a request, set to `1` to enable the policy. Set to `0` to disable the policy. - `filter` VulnerabilityPoliciesCVE, required - `cveIds` string[] — The CVE ID full name(s), such as CVE-2019-01234, CVE-2019-5678. You can specify multiple values but they will be considered as "or" values (rather than "and"). - `packageNames` string[] - `severityInfo` VulnerabilityPoliciesSeverityFilter - `allowedCounts` number, required — The number of vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. - `allowedFixable` number, required — The number of fixable vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. `0` means all fixable vulnerabilities must be addressed. - `severityLow` VulnerabilityPoliciesSeverityFilter - `allowedCounts` number, required — The number of vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. - `allowedFixable` number, required — The number of fixable vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. `0` means all fixable vulnerabilities must be addressed. - `severityMedium` VulnerabilityPoliciesSeverityFilter - `allowedCounts` number, required — The number of vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. - `allowedFixable` number, required — The number of fixable vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. `0` means all fixable vulnerabilities must be addressed. - `severityHigh` VulnerabilityPoliciesSeverityFilter - `allowedCounts` number, required — The number of vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. - `allowedFixable` number, required — The number of fixable vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. `0` means all fixable vulnerabilities must be addressed. - `severityCritical` VulnerabilityPoliciesSeverityFilter - `allowedCounts` number, required — The number of vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. - `allowedFixable` number, required — The number of fixable vulnerabilities of that severity level that is allowed in your environment. `-1` means unlimited. `0` means all fixable vulnerabilities must be addressed. - `props` object, required — The vulnerability policy's properties. - `description` string — A brief description of the policy creation. - `createdBy` string — The user who creates the policy. - `updatedBy` string — The user who updates the policy. - `policyGuid` string — Vulnerability Policy ID - `createdTime` string — The time and date when the vulnerability policy was created. - `updatedTime` string — The time and date when the vulnerability policy was last updated. - `isDefault` 0 | 1 — Returns `1` if this is a default vulnerability policy. Otherwise, returns `0`. ## Other responses - `4XX` — Client Error - `5XX` — Internal Server Error --- [API](https://skmtc.net/lacework/apis/forticnapp-api-2-0-documentation.md) · [All operations](https://skmtc.net/lacework/apis/forticnapp-api-2-0-documentation/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lacework/forticnapp-api-2-0-documentation/versions/7015f76895f2/schema)