You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/artifact-management/block-until-scan.mdx
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
import { Note, BlockImage } from'@/components'
2
2
3
-
# Block Until Scanned
3
+
# Block Until Scan
4
4
5
5
**Block Until Scan** is a security feature designed to enhance the integrity and security of software packages served by Cloudsmith, guaranteeing that all relevant security and compliance policy checks (licenses, vulnerabilities, package deny policies) are fully completed *before* a package is made available for download.
6
6
@@ -37,7 +37,7 @@ To verify the functionality of Block Until Scan, follow these steps:
37
37
📘 Note that incoming packages from sources different to an upstream are also subjected to Block Until Scan. Downloads won't be allowed until all security checks have been completed.
38
38
</Note>
39
39
40
-
#### 2. Vulnerability policy creation
40
+
#### 2. Create a Vulnerability policy
41
41
42
42
Browse to your Workspace Settings and [create a new vulnerability policy](/policy-management/vulnerability-policy). Define your policy with:
43
43
- A name.
@@ -51,9 +51,9 @@ Then, click in **+ Create Policy**.
51
51
52
52
Execute a command to pull a new package. For example, `requests==0.2.2`. This package contains a known vulnerability with a high severity CVE: `2018-18074`. If this package already exists in your repo, find a different one that hasn't been synced and cached before:
@@ -65,7 +65,7 @@ When a package is not yet cached within Cloudsmith, every package and its depend
65
65
***Policy Evaluation**: The package is evaluated against all active policies.
66
66
</Note>
67
67
68
-
#### 4. Observe Behavior
68
+
#### 4. Observe Behavior
69
69
70
70
When Block Until Scan is enabled, the initial download request for an uncached package will be temporarily blocked until the policy evaluation has completed:
71
71
-**Successful Scan**: If the package passes all policy checks, the download will proceed, and the package will be served normally.
0 commit comments