Fail-Closed

2 tutorials in this category.

07 How to Enable Checksum Fail-Closed Enforcement Block silently swapped upstream packages by switching CHAINSAW_CHECKSUM_MODE from log to quarantine or block. Advanced 15 minutes Platform Engineers / Security Engineers 13 How to Refuse Installs When a Required Signal Could Not Be Evaluated Turn on the optional fail-closed coverage gate: declare the data sources that must be evaluable, measure in warn mode, then refuse instead of allowing unchecked. Off by default. Advanced 30 minutes Platform Engineers / Security Engineers in regulated environments