chainctl
chainctl Chainguard Control
For the complete documentation index, see llms.txt.
List policy overrides.
List active policy overrides to see which artifacts have been waived and for which policy.
Overrides are scoped to one organization: pass –parent, or omit it to use your configured default group, or (with no default configured) the single organization you can access — you are prompted when several are available. Each override shows its ID, the policy it waives, the targeted artifact, and the reason.
chainctl policies override list [--parent ORGANIZATION_NAME | ORGANIZATION_ID] [--output=json|table] [flags] # List overrides for your default (or only) organization
chainctl policies override list
# List overrides for a specific organization
chainctl policies override list --parent=engineering --parent string The name or id of the organization to list overrides for. --api string The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
--audience string The Chainguard token audience to request. (default "https://console-api.enforce.dev")
--config string A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
--console string The url of the Chainguard platform Console. (default "https://console.chainguard.dev")
--force-color Force color output even when stdout is not a TTY.
-h, --help Help for chainctl
--issuer string The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
--log-level string Set the log level (debug, info) (default "ERROR")
-o, --output string Output format. One of: [csv, env, go-template, id, json, markdown, none, table, terse, tree, wide]
-v, --v int Set the log verbosity level.Last updated: 2026-07-31 18:12