#Configuring OSA policies

To decide whether to block or allow downloading of components, the plugin uses the CodeScoring policies mechanism.

To apply a policy when the plugin calls CodeScoring, create an OSA policy under Settings -> Policies. Its proxy stage is assigned automatically. Then configure:

• if it is necessary for the policy to block a component request, set the Blocker flag.
• set the Is Active flag.

Set the policy scope:

• OSA Components — required component type (packages or container images);
• Repositories — optional list of artifact repositories. Only Docker repositories can be selected for container images.

You can also use policy conditions based on the repository name or repository manager name.

Important: to select a repository, you must first connect the repository manager to the platform.