opschain security git-policies list

Included from Basic tier

Lists the git identity policy entries the caller may see: all of them for superusers, global security administrators and auditors; a project delegate sees global entries plus their projects' entries.

opschain security git-policies list
SCOPE   REMOTE  REVS       PRINCIPALS                 DEFAULT  SEEDED  ID
global  origin  *          everyone-with-path-rights  no       yes     019a...
web     app     main       group:deployers            yes      no      019a...

Seeded entries (SEEDED yes) are the upgrade grandfathering review queue: each one preserves a remote's pre-policy reach and should be reviewed — replacing it (a put naming its id) marks it reviewed.

-o, --output json|yaml emits the entry rows as a machine document.

Flags

Flag	Meaning
`--scope <code	global>`
--seeded[=false]	Narrow to seeded entries (--seeded) or reviewed ones (--seeded=false).
--server <url>	Server base URL (default: the active context / OPSCHAIN_SERVER).
--auth-token <token>	Bearer token override (default: your opschain login session, then $OPSCHAIN_ADMIN_TOKEN, then the token stored by opschain admin login).
--filter <column>[!]=<value>	Keep only rows matching the term (repeatable; terms AND). Columns are the printed table headers lowercased; * wildcards match the whole cell case-insensitively, != negates, commas mean any-of. Applied client-side. Grammar: opschain docs cli.

See also

• opschain docs cli/security-git-policies-show
• opschain docs cli/security-git-policies-put