dhal ci

CI posture checks for security policy.

dhal ci

Run CI checks:

npx dhal ci
npx dhal ci --json

Configure CI policy

{
  "policy": {
    "ci": {
      "failOnModes": ["off"],
      "requireWebhookSigning": false,
      "requireNonMonitorRouteForRules": [],
      "disallowExpiredSuppressions": true
    }
  }
}

Example GitHub Actions step

- name: Verify Dhal policy
  run: npx dhal ci

Use dhal replay --fail-on-block alongside CI checks for false-positive protection.