Advanced Configuration
16 tutorials in this category.
01
How to Integrate Chainsaw with CI/CD Pipelines
Configure GitHub Actions, GitLab CI, and Jenkins to route package installs through Chainsaw using scoped service tokens and job-local configuration.
01
How to Manage Policy Precedence and Exception Workflows
Understand first-match-wins evaluation, order policies by precedence, create time-bound exceptions, and balance security with developer productivity.
02
How to Configure Chainsaw with YAML Configuration Files
Define repositories, policies, credentials, and settings as code using YAML configuration files for reproducible, version-controlled Chainsaw deployments.
02
How to Manage Cache and Optimize Build Performance
Monitor cache hit ratios, understand the blob storage architecture, purge cached packages, and optimize cache performance for faster builds.
03
How to Generate a Hardening Bundle from the Admin Wizard
Produce a single zip that contains a Kubernetes admission webhook manifest, network egress allowlist, MDM payloads for Jamf/Intune, CI snippets, and a Prometheus bypass alert — wired to your specific deployment, not a generic example.
03
How to Create Custom Hook Scripts for Package Validation
Write hook scripts that receive package metadata via environment variables and integrate custom validation logic into the proxy pipeline.
04
How to Route GitHub Actions Builds Through Chainsaw
Configure GitHub Actions to install packages through Chainsaw using a Service Token, repository secrets, and job-local package-manager configuration, with a PR-gating example.
05
How to Route GitLab CI Builds Through Chainsaw
Configure GitLab CI to install packages through Chainsaw using a Service Token, masked CI/CD variables, and job-local package-manager configuration, with a merge-request gating example.
06
How to Route Jenkins Builds Through Chainsaw
Configure a Jenkins declarative pipeline to install packages through Chainsaw using a Username-with-password credential and job-local package-manager configuration.
07
How to Route CircleCI Builds Through Chainsaw
Apply Chainsaw's CI/CD integration pattern to CircleCI: Service Token, CI-stored secrets, and job-local package-manager configuration. Platform-specific config examples are pending.
08
How to Tune Risk Signal Weights via /settings/risk-weights
Override the default weights of every supply-chain signal that feeds the trust score. When the defaults don't match your org's risk model, tune them in the settings UI without writing custom policy.
08
How to Route Azure Pipelines Builds Through Chainsaw
Apply Chainsaw's CI/CD integration pattern to Azure Pipelines: Service Token, secret variables, and job-local package-manager configuration. Platform-specific config examples are pending.
09
Troubleshooting CI/CD Integration
Diagnose common Chainsaw CI/CD failures — authentication 401/400 errors, org-slug URL mistakes, and policy-block 403 verdicts — using the CHW error codes Chainsaw returns.
10
Policy DSL Reference (Rego / OPA Authoring Surface)
Author custom org-specific rules in Rego against the chainsaw.policy entrypoint: the input fields a rule can read, the decision shape it returns, the supported actions, and which inputs are populated at which enforcement surface.
10
How to Detect Bypass Attempts with `chainsaw doctor --bypass-check`
Find clients that are still reaching the public registries directly — the proxy is in place, but did everyone actually point at it? Two complementary surfaces: the doctor command from each client, and the `direct_registry_egress` view from the control plane.
12
YAML Conditions vs the Rego Policy DSL
Chainsaw has two policy surfaces — the built-in YAML / dashboard conditions and the signed Rego DSL. When to reach for each, and how they relate.