Mondoo
Docs
CLI Commands

cnspec policy lint

Lint a policy bundle to check for errors and ensure it compiles correctly.

Validate a policy bundle to ensure it compiles correctly and all queries and references are valid. Run this before uploading a policy to catch errors early. To learn more about managing policies, read Manage Policies with cnspec.

cnspec policy lint my-policy.mql.yaml

Output results in SARIF format for CI integration:

cnspec policy lint my-policy.mql.yaml --output sarif --output-file results.sarif

Options

  -h, --help                 help for lint
  -o, --output string        Set the output format: compact, sarif (default "cli")
      --output-file string   Set the output file

Options inherited from parent commands

      --api-proxy string   Set the proxy for communications with Mondoo Platform API
      --auto-update        Enable automatic provider installation and update (default true)
      --config string      Set config file path (default $HOME/.config/mondoo/mondoo.yml)
      --log-level string   Set the log level: error, warn, info, debug, trace (default "info")
  -v, --verbose            Enable verbose output

SEE ALSO

cnspec policy init

Create an example policy bundle file as a starting point for writing custom policies.

cnspec policy list

List enabled policies in the connected Mondoo Platform space.

On this page

OptionsOptions inherited from parent commandsSEE ALSO