A list of all available policies: Full policy list
Inspect a published policy manifest:
updatecli manifest show ghcr.io/updatecli/policies/autodiscovery/golang:latestDry-run (show what would change):
updatecli diff ghcr.io/updatecli/policies/autodiscovery/golang:latestApply a policy:
updatecli apply --config ghcr.io/updatecli/policies/autodiscovery/golang:latestCompose multiple policies from a local compose file:
-
Create
updatecli-compose.yaml(example below). -
Run:
updatecli compose apply --config ./updatecli-compose.yamlpolicies: - policy: "ghcr.io/updatecli/policies/autodiscovery/golang:latest" - policy: "ghcr.io/updatecli/policies/autodiscovery/npm:latest"
Note: values passed at runtime override bundle defaults. See each policy README for available values.
Policies are published on ghcr.io. Public pulls usually work, but authenticating reduces rate limiting and enables access to private bundles:
docker login ghcr.ioFor private bundles provide credentials via your container runtime or Updatecli’s registry auth options.
To inspect a policy bundle shipped inside a folder (useful for development):
updatecli manifest show --config ./policy-folder/updatecli.d --values ./policy-folder/values.yamlRender graph (Mermaid):
updatecli manifest show --config ./policy-folder/updatecli.d --values ./policy-folder/values.yaml --graph --graph-flavor mermaidPolicies in this repository are published automatically by CI when Policy.yaml version is bumped. When changing a policy:
-
Update
Policy.yaml.versionfollowing semver. -
Update
CHANGELOG.mdand the policyREADME.md. -
Ensure CI validation (lint/manifest tests) passes.
If you want to contribute, see CONTRIBUTING for contribution guidelines, PR checklist and publishing details.
Short contributor checklist:
-
Open an issue to discuss non-trivial changes.
-
Bump Policy.yaml version if behaviour changes.
-
Update README, CHANGELOG and example values.
-
Ensure CI passes before merging.
