> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cysmiq.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Policy condition fields

> Supported fields and operators for custom policy conditions.

## Overview

Custom policies use condition fields to match Cysmiq data. This reference is generated from the source policy field registry.

## Condition fields

Cysmiq currently exposes 59 condition fields across 7 policy targets.

### Vulnerability

Finding-level policy conditions for vulnerabilities.

| Field                       | Type    | Operators                 | Values                                 |
| --------------------------- | ------- | ------------------------- | -------------------------------------- |
| `severity`                  | string  | `=`, `!=`, `in`           | `critical`, `high`, `medium`, `low`    |
| `cvss_score`                | number  | `>`, `>=`, `<`, `<=`, `=` | -                                      |
| `epss_score`                | number  | `>`, `>=`, `<`, `<=`, `=` | -                                      |
| `cwe_ids`                   | array   | `contains`, `overlaps`    | workspace facts; custom values allowed |
| `impact_tags`               | array   | `contains`, `overlaps`    | workspace facts; custom values allowed |
| `environment.key`           | string  | `=`, `!=`, `in`           | workspace facts                        |
| `environment.is_production` | boolean | `=`, `!=`                 | -                                      |
| `reference.ref`             | string  | `=`, `!=`, `prefix`, `in` | -                                      |
| `reference.ref_type`        | string  | `=`, `!=`, `in`           | `branch`, `tag`                        |
| `package_openssf.score`     | number  | `>`, `>=`, `<`, `<=`, `=` | -                                      |
| `repository.tags`           | array   | `contains`, `overlaps`    | workspace facts; custom values allowed |
| `application.tags`          | array   | `contains`, `overlaps`    | workspace facts; custom values allowed |

### Package

Package-level policy conditions.

| Field              | Type   | Operators                 | Values                                 |
| ------------------ | ------ | ------------------------- | -------------------------------------- |
| `openssf.score`    | number | `>`, `>=`, `<`, `<=`, `=` | -                                      |
| `repository.tags`  | array  | `contains`, `overlaps`    | workspace facts; custom values allowed |
| `application.tags` | array  | `contains`, `overlaps`    | workspace facts; custom values allowed |

### Package version

Package version and dependency context conditions.

| Field                       | Type    | Operators                 | Values                                 |
| --------------------------- | ------- | ------------------------- | -------------------------------------- |
| `package.purl`              | string  | `=`, `!=`, `prefix`, `in` | workspace facts                        |
| `package.version_purl`      | string  | `=`, `!=`, `prefix`, `in` | workspace facts                        |
| `package.name`              | string  | `=`, `!=`, `in`           | workspace facts                        |
| `package.namespace`         | string  | `=`, `!=`, `in`           | workspace facts                        |
| `package.type`              | string  | `=`, `!=`, `in`           | workspace facts                        |
| `package.version`           | string  | `=`, `!=`, `in`           | workspace facts                        |
| `dependency.type`           | string  | `=`, `!=`, `in`           | `direct`, `transitive`                 |
| `reference.ref`             | string  | `=`, `!=`, `prefix`, `in` | -                                      |
| `reference.ref_type`        | string  | `=`, `!=`, `in`           | `branch`, `tag`                        |
| `environment.key`           | string  | `=`, `!=`, `in`           | workspace facts                        |
| `environment.is_production` | boolean | `=`, `!=`                 | -                                      |
| `repository.tags`           | array   | `contains`, `overlaps`    | workspace facts; custom values allowed |
| `application.tags`          | array   | `contains`, `overlaps`    | workspace facts; custom values allowed |

### Manifest

Manifest and dependency file conditions.

| Field                       | Type    | Operators                 | Values                                 |
| --------------------------- | ------- | ------------------------- | -------------------------------------- |
| `manifest_type`             | string  | `=`, `!=`, `in`           | workspace facts                        |
| `environment.key`           | string  | `=`, `!=`, `in`           | workspace facts                        |
| `environment.is_production` | boolean | `=`, `!=`                 | -                                      |
| `reference.ref`             | string  | `=`, `!=`, `prefix`, `in` | -                                      |
| `reference.ref_type`        | string  | `=`, `!=`, `in`           | `branch`, `tag`                        |
| `repository.tags`           | array   | `contains`, `overlaps`    | workspace facts; custom values allowed |
| `application.tags`          | array   | `contains`, `overlaps`    | workspace facts; custom values allowed |

### Asset

Asset-level conditions.

| Field              | Type   | Operators              | Values                                 |
| ------------------ | ------ | ---------------------- | -------------------------------------- |
| `type`             | string | `=`, `!=`, `in`        | workspace facts                        |
| `repository.tags`  | array  | `contains`, `overlaps` | workspace facts; custom values allowed |
| `application.tags` | array  | `contains`, `overlaps` | workspace facts; custom values allowed |

### Secret

Secret finding conditions.

| Field                       | Type    | Operators                 | Values                                 |
| --------------------------- | ------- | ------------------------- | -------------------------------------- |
| `provider`                  | string  | `=`, `!=`, `in`           | workspace facts                        |
| `is_vulnerable`             | boolean | `=`, `!=`                 | -                                      |
| `is_exploitable`            | boolean | `=`, `!=`                 | -                                      |
| `is_verified`               | boolean | `=`, `!=`                 | -                                      |
| `manual_override`           | boolean | `=`, `!=`                 | -                                      |
| `environment.key`           | string  | `=`, `!=`, `in`           | workspace facts                        |
| `environment.is_production` | boolean | `=`, `!=`                 | -                                      |
| `reference.ref`             | string  | `=`, `!=`, `prefix`, `in` | -                                      |
| `reference.ref_type`        | string  | `=`, `!=`, `in`           | `branch`, `tag`                        |
| `repository.tags`           | array   | `contains`, `overlaps`    | workspace facts; custom values allowed |
| `application.tags`          | array   | `contains`, `overlaps`    | workspace facts; custom values allowed |

### Code

Code finding conditions.

| Field                              | Type    | Operators                 | Values                                 |
| ---------------------------------- | ------- | ------------------------- | -------------------------------------- |
| `analysis_type`                    | string  | `=`, `!=`, `in`           | workspace facts                        |
| `is_vulnerable`                    | boolean | `=`, `!=`                 | -                                      |
| `has_exploitable_call_hierarchy`   | boolean | `=`, `!=`                 | -                                      |
| `exploitable_call_hierarchy_count` | number  | `>`, `>=`, `<`, `<=`, `=` | -                                      |
| `environment.key`                  | string  | `=`, `!=`, `in`           | workspace facts                        |
| `environment.is_production`        | boolean | `=`, `!=`                 | -                                      |
| `reference.ref`                    | string  | `=`, `!=`, `prefix`, `in` | -                                      |
| `reference.ref_type`               | string  | `=`, `!=`, `in`           | `branch`, `tag`                        |
| `repository.tags`                  | array   | `contains`, `overlaps`    | workspace facts; custom values allowed |
| `application.tags`                 | array   | `contains`, `overlaps`    | workspace facts; custom values allowed |