Wingetlywingetly
← All apps

Policy CLI

by opcr.iov0.4.1

Last updated

A Docker-inspired workflow for OPA policies

Visit homepage

Install with winget

$ winget install --id OpenPolicyContainers.Policy --exact --version 0.4.1

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Silent install command for Policy CLI

Policy CLI uses MSI (WiX). The silent install switches are /quiet /norestart.

One-line silent install (x64, machine scope)
msiexec.exe /i policy_windows_amd64.msi /quiet /norestart

See the full silent install reference for Policy CLI →

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

Installers · v0.4.1

ArchitectureTypeScopeInstallDownload
x64Portable
in ZIP
-Direct
x64MSI
WiX
machineDirect

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

5 known CVEs via NVD

  • medium6.1Fix in v0.68.0CVE-2024-8260affects before 0.68.0Aug 30, 2024

    A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability exists because of improper input validation, allowing a user to pass an arbitrary SMB share instead of a Rego file as an argument to OPA CLI or to one of the OP...

  • high7.4Patched in wingetCVE-2022-36085affects before 0.43.1Sep 8, 2022

    Open Policy Agent (OPA) is an open source, general-purpose policy engine. The Rego compiler provides a (deprecated) `WithUnsafeBuiltins` function, which allows users to provide a set of built-in functions that should be deemed unsafe — and as such rejected — by the compiler if e...

    Patch
  • high7.5Fix in v0.42.0CVE-2022-33082affects before 0.42.0Jun 30, 2022

    An issue in the AST parser (ast/compile.go) of Open Policy Agent v0.10.2 allows attackers to cause a Denial of Service (DoS) via a crafted input.

  • high7.5Patched in wingetCVE-2022-28946affects v0.39.0May 19, 2022

    An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causing a Denial of Service (DoS) via triggering out-of-range memory access.

    Patch
  • medium6.3Patched in wingetCVE-2022-23628affects before 0.37.0Feb 9, 2022

    OPA is an open source, general-purpose policy engine. Under certain conditions, pretty-printing an abstract syntax tree (AST) that contains synthetic nodes could change the logic of some statements by reordering array literals. Example of policies impacted are those that parse a...

    Patch
Source: NVD, updated 5h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.

Related apps

  • G
    GrypeAnchore Inc
    Anchore.Grypev0.119.0

    A vulnerability scanner for container images and filesystems

  • S
    SyftAnchore Inc
    Anchore.Syftv1.51.0

    CLI tool and library for generating a Software Bill of Materials from container images and filesystems

  • D
    DS (Delivery Station)Kharkevich Engineering Lab
    DeliveryStation.dsv1.6.2

    Plugin-based CLI wrapper and infrastructure manager for OCI artifact tools

  • C
    CycloneDX Generator (cdxgen)OWASP Foundation
    CycloneDX.cdxgenv13.1.0

    A polyglot tool and a library for generating various Bill of Materials in CycloneDX specification.

  • M
    MicrosandboxSuper Rad Company
    SuperRadCompany.Microsandboxv0.7.1

    Fast local microVM runtime for running untrusted workloads with hardware isolation.

  • ORAS CLIORAS Project
    ORASProject.ORASv1.3.4

    OCI registry client - managing content like artifacts, images, packages

More from opcr.io or browse oci, oci-image, open-policy-agent.

Frequently asked questions

How do I install Policy CLI on Windows?
Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id OpenPolicyContainers.Policy --exact --version 0.4.1. winget downloads the installer from opcr.io and runs it. Requires Windows 10 (1809+) or Windows 11.
How do I install Policy CLI silently for unattended deployment?
Add --silent and accept the agreements upfront: winget install --id OpenPolicyContainers.Policy --exact 0.4.1 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.
What are the silent install switches for Policy CLI?
Policy CLI uses MSI (WiX). Run the downloaded installer with: msiexec.exe /i policy_windows_amd64.msi /quiet /norestart. The silent switches are /quiet /norestart.
How do I uninstall Policy CLI via winget?
Run: winget uninstall --id OpenPolicyContainers.Policy --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from Policy CLI's Apps & Features entry.
Is Policy CLI free?
Policy CLI is distributed under Apache-2.0. Refer to the publisher (https://openpolicycontainers.com/) for the full license terms - Wingetly itself does not charge for installation.
Does Policy CLI work on Windows 10?
Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls Policy CLI directly from the publisher.
How do I keep Policy CLI up to date?
Run winget upgrade --id OpenPolicyContainers.Policy --exact, or winget upgrade --all to update everything winget tracks. We index 10 versions of Policy CLI from microsoft/winget-pkgs.

Recent versions

  • 0.4.1latest
  • 0.4.0
  • 0.3.8
  • 0.3.7
  • 0.3.6
  • 0.3.5
  • 0.3.4
  • 0.3.3
  • 0.3.2
  • 0.3.0