Skip to content

EXCEPTION_PLAYBOOK.md

Latest commit

 

History

History
34 lines (26 loc) · 839 Bytes

EXCEPTION_PLAYBOOK.md

File metadata and controls

34 lines (26 loc) · 839 Bytes

Exceptions playbook

Principles

  • Time-box and scope every exception
  • Require justification and a named owner
  • Prefer storing exception metadata outside the default policy file when your organization allows it

Template (YAML-style)

Use a unique id and an explicit expiry where possible:

id: EX-2026-0001
ruleIds:
  - OSV-2026-00000
scope:
  repo: org/service
  path: services/api/
  until: "2026-12-31"
owner: team-security
justification: Pending upstream fix; reachable path gated by authorization controls

Review exceptions on a schedule; remove or renew before until passes.

Related documentation