chainctl
chainctl Chainguard Control
2 min read
For the complete documentation index, see llms.txt.
Delete a policy override.
Delete a policy override to revoke a waiver.
Deletion happens immediately and is not confirmed: there is no prompt and no –force flag, so the override is removed as soon as you run the command. Once removed, the targeted artifact is again subject to the policy’s result.
Pass the override’s full ID (a UIDP) as the positional argument; it is globally unique, so no –parent is needed. Use “chainctl policy override list” to find it.
chainctl policy override delete OVERRIDE_ID [flags] # Delete an override by ID
chainctl policy override delete <override-id> --api string The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
--audience string The Chainguard token audience to request. (default "https://console-api.enforce.dev")
--config string A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
--console string The url of the Chainguard platform Console. (default "https://console.chainguard.dev")
--force-color Force color output even when stdout is not a TTY.
-h, --help Help for chainctl
--issuer string The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
--log-level string Set the log level (debug, info) (default "ERROR")
-o, --output string Output format. One of: [csv, env, go-template, id, json, markdown, none, table, terse, tree, wide]
-v, --v int Set the log verbosity level.chainctl Chainguard Control
chainctl policy Manage policies.
chainctl policy decision Inspect policy decisions.
chainctl policy describe Describe a policy and its parameter schema.
chainctl policy disable Disable a policy.
Last updated: 2026-08-31 17:17