opschain security git-policies mode
Included from Basic tier
Shows the git identity policy mode — the estate-wide allow-all switch
and the seeded review-queue size — or flips the switch with --allow-all.
opschain security git-policies mode
Allow all: no
Seeded entries: 3
opschain security git-policies mode --allow-all
Git identity policy allow-all: yes
The switch is global only and settable by the global security
administrator (or a superuser) alone — there is no per-project
relaxation, so the estate is either strict or it is not, one auditable
fact. With allow-all on, every configured remote is usable at any rev
(the pre-policy posture); prefer broad allow-list entries over the
switch — broad allows are visible and reviewable, a disabled domain is a
blind spot. The flip is audited (api:git_remote_policies:mode_update).
Flags
| Flag | Meaning |
|---|---|
--allow-all[=false] | Set the estate-wide allow-all switch; omit the flag to show the current mode. |
--server <url> | Server base URL (default: the active context / OPSCHAIN_SERVER). |
--auth-token <token> | Bearer token override (default: your opschain login session, then $OPSCHAIN_ADMIN_TOKEN, then the token stored by opschain admin login). |
See also
opschain docs cli/security-git-policies