Skip to content

halo cloud-agents render

Render the SHA-pinned, least-privilege workflow files of the repo-configured cloud agents

Renders .github/workflows/halos-claude.yml, halos-gemini.yml and copilot-setup-steps.yml from halos.yaml cloudAgents, checked against the never-bypass invariant. Without –out it prints them. Commit them to the repositories cloudAgents.<vendor>.repos names, by pull request. Console-configured vendors are in halo admin plan.

Terminal window
halo cloud-agents render [flags]
Flag Shorthand Type Default Description
--out string write the files under this directory (a repository checkout); default: print them
--policy-dir string policy repo directory (default “.”)
Flag Shorthand Type Default Description
--output string text output format: text|json

halo cloud-agents