`autonomy oci attach-policy`¶

Attach a policy bundle tarball to an OCI image

Synopsis¶

Attaches the policy bundle at --bundle to the OCI image at --image.

The bundle should be a .tar or .tar.gz file produced by 'autonomy policy pack'.
Uses the same referrers/sidecar strategy selection as attach-lock.

Usage¶

autonomy oci attach-policy [flags]

Options¶

      --bundle string   path to policy bundle tarball (default "policy.tar")
      --image string    OCI image reference (required)

Options inherited from parent commands¶

      --require-signed-manifest   Refuse to start if the SHA256SUMS release manifest or its cosign signature is missing/invalid (Tier 2 binary-integrity check; default: build-time compile-in via -ldflags -X, build-hardened artifacts=true, all others=false)

See also¶

autonomy oci — Manage OCI artifact attachments (lock, policy bundle)