Skip to content

Commit 1b9a401

Browse files
authored
Link to malware list chainctl command (#3709)
[ ] Check if this is a typo or other quick fix and ignore the rest :) ## Type of change Update Libraries overview and CGRepo library policies ### What should this PR do? Link to and mention the chainctl command to list malware/greyware blocked by Chainguard ### Why are we making this change? Clarity / another option for getting this information ### What are the acceptance criteria? Content should be clear and accurate, links should work ### How should this PR be tested? Any documentation published to Chainguard Academy is reviewed carefully for accuracy. GUI procedures, API commands, and CLI code snippets in a draft are run and tested thoroughly — by both the author and the reviewer — to confirm they work exactly as written. This helps ensure that readers can follow along and get the same results. See the [`edu` repo's README](https://github.com/chainguard-dev/edu#testing). <!-- What should your reviewer do to test this PR? Please list any steps that are additional to or different from the standard. If you outline steps in the console, include the console release version in this PR message. --> --------- Signed-off-by: s-stumbo <sally.stumbo@chainguard.dev>
1 parent 0b922a7 commit 1b9a401

2 files changed

Lines changed: 9 additions & 5 deletions

File tree

content/chainguard/chainguard-repository/library-policies.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ linktitle: "Library Policies"
44
description: "Configure and enforce policies that control which Chainguard Libraries package versions your organization can pull"
55
type: "article"
66
date: 2026-07-31T00:00:00+00:00
7-
lastmod: 2026-08-03T18:16:45+00:00
7+
lastmod: 2026-08-05T14:52:37+00:00
88
draft: false
99
tags: ["Chainguard Libraries"]
1010
menu:
@@ -177,7 +177,7 @@ chainctl libraries policy enable team-policy --ecosystem=PYTHON --mode=ENFORCE
177177

178178
### Check blocked packages
179179

180-
Use `chainctl libraries packages blocked` to review what a policy has blocked. By default, this shows pull events that were blocked under any enforced policies. For example:
180+
Use `chainctl libraries packages blocked` to review what has been blocked by your organization's policy. By default, this shows pull events that were blocked under any enforced policies. For example:
181181

182182
```bash
183183
chainctl libraries packages blocked --ecosystem=JAVASCRIPT
@@ -192,6 +192,8 @@ chainctl libraries packages blocked --mode=PREVIEW --ecosystem=JAVASCRIPT
192192

193193
Replace `example-policy` with the name of the policy you want to preview.
194194

195+
To check packages that have been blocked by [Chainguard's global malware/greyware blocklist](/chainguard/libraries/overview/#malware-and-greyware-detection), use [`chainctl libraries packages malware list`](/platform/chainctl/chainctl-docs/chainctl_libraries_packages_malware_list/).
196+
195197
## Override policies
196198

197199
### Override a blocked package

content/chainguard/libraries/overview.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ description: "Learn about Chainguard Libraries, providing enhanced security for
66
comprehensive supply chain protection."
77
type: "article"
88
date: 2025-03-25T08:04:00+00:00
9-
lastmod: 2026-07-30T14:25:45+00:00
9+
lastmod: 2026-08-05T15:47:45+00:00
1010
draft: false
1111
tags: ["Chainguard Libraries", "Overview"]
1212
menu:
@@ -194,11 +194,13 @@ Chainguard's scanning evaluates multiple signal types, including:
194194
* **Typosquatting and impersonation**: The package is named or brand-engineered to deceive users into downloading the wrong package.
195195
* **Compromised or untrusted releases**: The package exhibits signs that a release cannot be trusted.
196196

197-
You can view blocked packages [in the Chainguard Console](/chainguard/libraries/browse/#view-malware-information) or [using `chainctl` commands](/chainguard/libraries/access/#check-blocked-packages).
197+
#### View blocked packages
198+
199+
You can view blocked packages [in the Chainguard Console](/chainguard/libraries/browse/#view-malware-information), [using `chainctl` commands](/platform/chainctl/chainctl-docs/chainctl_libraries_packages_malware_list/), or [via the API](#malware-api).
198200

199201
#### Malware API
200202

201-
Chainguard's [malware API endpoint](/chainguard/api/spec-api-v1/#tag/malware) provides access to Chainguard's malware blocklist. You can use it to retrieve a list of packages that have been identified as malicious and blocked by Chainguard.
203+
Chainguard's malware API endpoint provides access to Chainguard's malware blocklist. You can use it to retrieve a list of packages that have been identified as malicious and blocked by Chainguard. Learn more about it in the [API documentation](/platform/api/spec-api-v1/).
202204

203205
Expand the following section to see examples:
204206

0 commit comments

Comments
 (0)