cnspec policy

Use cnspec policy subcommands to create, validate, upload, and manage security policies. Policies are collections of security checks written in MQL that cnspec uses to scan assets. These subcommands let you control which policies are active in your Mondoo Platform space, download them for local editing, and upload custom policies.

To learn about managing policies, read Manage Policies with cnspec. To learn how to write custom policies, read the Policy Authoring Guide.

Options

  -h, --help   help for policy

Options inherited from parent commands

      --api-proxy string        Set the proxy for communications with Mondoo Platform API
      --auto-update             Enable automatic provider installation and update (default true)
      --config string           Set config file path (default $HOME/.config/mondoo/mondoo.yml)
      --log-level string        Set the log level: error, warn, info, debug, trace (default "info")
      --logging-config string   Path to a logging configuration file (YAML or JSON) that selects the log writer, level, and writer-specific options
  -v, --verbose                 Enable verbose output

SEE ALSO

• cnspec - cnspec CLI
• cnspec policy delete - Delete a policy from the connected space
• cnspec policy disable - Disables a policy in the connected space
• cnspec policy download - download a policy to a local bundle file
• cnspec policy enable - Enables a policy in the connected space
• cnspec policy format - Apply style formatting to one or more policy bundles
• cnspec policy graph - Navigate policy bundle structure via graph commands
• cnspec policy info - Show more info about a policy from the connected space
• cnspec policy init - Create an example policy bundle
• cnspec policy lint - Lint a policy bundle
• cnspec policy list - List enabled policies in the connected space
• cnspec policy upload - Upload a policy to the connected space