Policy Condition for Direct Components

[forsakenwalkatnight]

Current Behavior

In the policy management we can add coordinates as condition. While coordinates can be specified with a group, name, and version, an exact match is not provided.

Example: Component shown as belonging to group "org.keycloak" is actually part of "org.keycloak.bom" group and shows up as a result in the alert. This results in reporting on 70 components instead of 34 direct ones.

Proposed Behavior

Add a new condition to the policy management for direct components only.

Checklist

• I have read and understand the contributing guidelines
• I have checked the existing issues for whether this enhancement was already requested