Policy Enforcement

11 tutorials in this category.

2001 CHW-2001 PolicyViolation request blocked by configured policy; review the policy that matched in the policy audit log 2002 CHW-2002 VulnerabilityBlocked package blocked because it contains a known vulnerability at or above the configured severity threshold; upgrade the package or lower the threshold 2003 CHW-2003 LicenseBlocked package blocked because its license is not on the allowed list for this repository; add the SPDX ID to the allowlist or choose a compatible package 2004 CHW-2004 TyposquatBlocked package name resembles a known-good package and was blocked as a suspected typosquat; verify the intended name or allowlist the coordinate 2301 CHW-2301 PolicyReleaseAgeBlocked package release is younger than the configured minimum-age window; wait for the version to age out or add an exception for this coordinate 2302 CHW-2302 PolicyBlocked request blocked by configured policy; review the matched policy in the audit log or request an exception from an org admin 2303 CHW-2303 MalwareBlocked package flagged as known malicious by the supply-chain scanner and blocked; verify the package coordinate and report the detection if it appears to be a false positive 2304 CHW-2304 RepositoryHookBlocked request blocked by repository hook; review the hook response or the hook configuration 2305 CHW-2305 ChecksumMismatch artifact checksum mismatch: upstream-declared hash disagrees with downloaded bytes; inspect the X-Chainsaw-Checksum-Mismatch header or raise CHAINSAW_CHECKSUM_MODE=log if this is a known-false-posi… 2306 CHW-2306 PublishPolicyBlocked publish blocked by policy; the rule that fired is named in the response payload's policy_id / rule_id field 2307 CHW-2307 CoverageUnavailable required signal coverage unavailable: a data source your deployment marked mandatory could not be evaluated for this package, so the request was refused rather than allowed unchecked; the missing s…