Skip to main content

Read-eval-print loop (REPL)

The policy CLI gives you a read-eval-print loop experience over a tagged policy image. It uses the opa evaluator under the covers.

policy repl <registry>/<organization-name>/<repository-name>:<tag>
note

policy repl requires that you push your tagged image to an OCI-compliant registry. If you haven't yet, issue a policy push on your policy image.

Example

$ policy repl ghcr.io/ogazitt/peoplefinder:1.0.0

Pulling.
ref: ghcr.io/ogazitt/peoplefinder:1.0.0

Pulled ref [ghcr.io/ogazitt/peoplefinder:1.0.0].
digest: sha256:84dbd4e3b5572dd2f23c3c987c89443fdcb57af87d714ea296fc552192fb17e9
running policy [ghcr.io/ogazitt/peoplefinder:1.0.0]
> data.system.bundles
{
"/Users/ogazitt/.policy/policies-root/blobs/sha256/84dbd4e3b5572dd2f23c3c987c89443fdcb57af87d714ea296fc552192fb17e9": {
"manifest": {
"revision": "",
"roots": [
"peoplefinder"
]
}
}
}
>