Skip to content

verdict policy publish

Replace the active policy after the server accepts and compiles the uploaded source. The acknowledgement does not report policy tests or access verification.

Runs against the selected server connection. Effects: replace active policy.

ArgumentTypeRequiredDefaultDescription
<file>positionalnoNo parser defaultPolicy file override, relative to the current directory
--configstringnoNo parser defaultProject configuration path; otherwise discover it
--jsonbooleannofalseOutput as JSON
--endpointstringnoNo parser defaultInstance base URL, including any subpath (env: VERDICT_HOST, fallback: http://localhost:4891)
--hoststringnoNo parser defaultAlias for —endpoint
--api-keystringnoNo parser defaultAPI key (env: VERDICT_API_KEY takes precedence)
--profilestringnoNo parser defaultStored profile (env: VERDICT_PROFILE)
--localbooleannofalseUse http://localhost:4891 without stored or environment credentials

--help (-h) shows command help without executing the command. Boolean flags support --no-<flag>. Defaults stated in descriptions may be resolved by the handler or configuration rather than the argument parser.

Optional UTF-8 file path; defaults to the configured policy or policy.vd. ’-’ is an ordinary path.

File input: supported. Standard input: unsupported.

{
"kind": "json-schema",
"schema": {
"type": "object",
"required": [
"file",
"published"
],
"additionalProperties": false,
"properties": {
"file": {
"type": "string"
},
"published": {
"type": "boolean",
"const": true
}
}
},
"example": {
"file": "policy.vd",
"published": true
}
}

By default, the command renders human-readable records. --json writes one JSON result to stdout. Operational failures use status 1; JSON failures contain an error object with code and message. See shared output semantics.

  • 0: the command completed its operation.

Argument, I/O, and other failures handled by the CLI runner use status 1.

verdict policy publish policy.vd --json