CLI: Policies
Generated from deedglass help --json (CLI 0.1.0-dev). Global flags and exit codes are on the CLI reference page.
deedglass policy lint
Section titled “deedglass policy lint”Check a policy file.
deedglass policy lint <file|dir|->... [--format text|json|github] [--voice] [--json]Add --json for machine-readable output.
deedglass policy fmt
Section titled “deedglass policy fmt”Format a policy file.
deedglass policy fmt [-w] [--check] <file|dir|->... [--json]Add --json for machine-readable output.
deedglass policy test
Section titled “deedglass policy test”Run a policy’s test cases.
deedglass policy test <policy.yaml|cases.yaml>... [--cases <file>] | --dir <dir> [--require-coverage] [--voice] [--run <regexp>] [--json]Add --json for machine-readable output.
deedglass policy push
Section titled “deedglass policy push”Upload a new policy version.
deedglass policy push <policy.yaml> [--notes "…"] [--json]Add --json for machine-readable output.
deedglass policy activate
Section titled “deedglass policy activate”Activate a policy version.
deedglass policy activate <name|pol_…> --version <n> --mode enforce|shadow --reason "…" [--yes] [--ack default_allow] | --clear --reason "…" [--json]Add --json for machine-readable output.
deedglass policy evaluate
Section titled “deedglass policy evaluate”Evaluate one action against a policy.
deedglass policy evaluate --policy <file> | --server [--policy <name> --version <n>] --tool <name> [--sql …] [--args <json>] [--input <file>] [--agent …] [--label k=v] [--user …] [--time …] [--tz …] [--usage k=v] [--explain] [--json]Add --json for machine-readable output.
deedglass policy replay
Section titled “deedglass policy replay”Replay past actions against a version.
deedglass policy replay <name|pol_…> --version <n> [--from 7d] [--to now] [--baseline recorded|vN] [--wait] [--quiet] [--json]Add --json for machine-readable output.
deedglass policy diff
Section titled “deedglass policy diff”Compare two policy versions.
deedglass policy diff <old.yaml> <new.yaml> | <policy> <vA> <vB> [--context 3] [--json]Add --json for machine-readable output.
deedglass policy install
Section titled “deedglass policy install”Install a policy pack as files.
deedglass policy install <pack>[@version] [--dir policies] [--from <dir|tar.gz>] [--latest] [--yes] [--json]Add --json for machine-readable output.
deedglass policy packs list
Section titled “deedglass policy packs list”List the policy packs.
deedglass policy packs list [--from <dir|tar.gz>] [--latest] [--json]Add --json for machine-readable output.
deedglass policy packs verify
Section titled “deedglass policy packs verify”Check the packs against their signed index.
deedglass policy packs verify [--from <dir|tar.gz>] [--latest] [--json]Add --json for machine-readable output.