kosli evaluate input

This is a beta feature. Beta features provide early access to product functionality. These features may change between releases without warning, or can be removed in a future release. Please contact us to enable this feature for your organization.

Synopsis

kosli evaluate input [flags]

Evaluate a local JSON input against a Rego policy. Read JSON from a file or stdin and evaluate it against a Rego policy. The input file should contain the raw JSON object your policy expects — not the wrapper produced by --show-input. Use jq '.input' to extract the policy input from a --show-input --output json capture. The policy must use package policy and define an allow rule. An optional violations rule (a set of strings) can provide human-readable denial reasons. By default a deny exits with code 1. Pass --no-assert to print the verdict and exit 0 even on deny, when this command is feeding another tool as a policy decision point. When --input-file is omitted, JSON is read from stdin. Use --params to pass configuration data to the policy as data.params. This accepts inline JSON or a file reference (@file.json).

Flags

Flag	Description
`--assert`	[optional] Exit with a non-zero status when the policy denies. This is the current default; pass `--assert` to lock it in across future releases.
`-h`, `--help`	help for input
`-i`, `--input-file` string	[optional] Path to a JSON input file. Reads from stdin if omitted.
`--no-assert`	[optional] Print the result and always exit 0, even when the policy denies. Use when this command feeds another tool as a policy decision point.
`-o`, `--output` string	[defaulted] The format of the output. Valid formats are: [table, json]. (default “table”)
`--params` string	[optional] Policy parameters as inline JSON or @file.json. Available in policies as data.params.
`-p`, `--policy` string	Path or http(s):// URL of a Rego policy to evaluate against the input.
`--show-input`	[optional] Include the policy input data in the output.

Flags inherited from parent commands

Flag	Description
`-a`, `--api-token` string	The Kosli API token.
`-c`, `--config-file` string	[optional] The Kosli config file path. (default “kosli”)
`--debug`	[optional] Print debug logs to stdout.
`-H`, `--host` string	[defaulted] The Kosli endpoint. (default “https://app.kosli.com”)
`--http-proxy` string	[optional] The HTTP proxy URL including protocol and port number. e.g. `http://proxy-server-ip:proxy-port`
`-r`, `--max-api-retries` int	[defaulted] How many times should API calls be retried when the API host is not reachable. (default 3)
`--org` string	The Kosli organization.
`-q`, `--quiet`	[optional] Suppress non-critical warning messages. Errors and normal output are not affected. If both `--quiet` and `--debug` are set, `--debug` wins.

Live Examples in different CI systems

GitHub

View an example of the kosli evaluate input command in GitHub.In this YAML file

Examples Use Cases

These examples all assume that the flags --api-token, --org, --host, (and --flow, --trail when required), are set/provided.

capture trail data for local policy iteration

kosli evaluate trail TRAIL --flow FLOW 
	--policy allow-all.rego 
	--show-input --output json | jq '.input' > trail-data.json

then iterate on your policy locally

kosli evaluate input 
	--input-file trail-data.json 
	--policy policy.rego

evaluate and show the data passed to the policy

kosli evaluate input 
	--input-file trail-data.json 
	--policy policy.rego 
	--show-input 
	--output json

read input from stdin

cat trail-data.json | kosli evaluate input 
	--policy policy.rego

evaluate with policy parameters (inline JSON)

kosli evaluate input 
	--input-file trail-data.json 
	--policy policy.rego 
	--params '{"threshold": 3}'

evaluate with policy parameters from a file

kosli evaluate input 
	--input-file trail-data.json 
	--policy policy.rego 
	--params @params.json

evaluate using a policy fetched from a remote URL

kosli evaluate input 
	--input-file trail-data.json 
	--policy https://policies.example.com/policy.rego

evaluate as a decision point (print verdict, never fail the step)

kosli evaluate input 
	--input-file trail-data.json 
	--policy policy.rego 
	--no-assert

Last modified on July 21, 2026

kosli enable beta kosli evaluate trail

⌘I

General

Top-level commands

kosli allow

kosli archive

kosli assert

kosli attest

kosli begin

kosli create

kosli delete

kosli diff

kosli disable / enable

kosli evaluate

kosli get

kosli join

kosli list

kosli log

kosli rename

kosli report

kosli request

kosli rotate

kosli snapshot

kosli unarchive

kosli update

Synopsis

Flags

Flags inherited from parent commands

Live Examples in different CI systems

Examples Use Cases

​Synopsis

​Flags

​Flags inherited from parent commands

​Live Examples in different CI systems

​Examples Use Cases

Synopsis

Flags

Flags inherited from parent commands

Live Examples in different CI systems

Examples Use Cases