Skip to content

"File Scan" fallback = Hash and Update UI #520

@chlaplan

Description

@chlaplan

Issue: New-CIPolicy uses the -Fallback level for any file where the primary level can't be determined. Unsigned files have no certificate/publisher info, so the cmdlet falls back to Hash for those files. Without a fallback, unsigned files would be silently skipped and wouldn't get any rule at all.

  1. "File Scan" hash is hardcoded as the default fallback, but when you select multiple levels, Hash is dropped from fallbacks. Need to add hash as default fallback
  2. Update UI to give admins an understanding what rule is level and fallback.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions