openvet init

openvet init creates an openvet.toml in the current working directory. The generated file is heavily commented and includes placeholder entries for the most common things you’ll need to configure: trusted logs and a default policy.

Usage #

openvet init

The command refuses to overwrite an existing openvet.toml. To regenerate from scratch, delete or rename the existing file first.

After running #

Edit openvet.toml to:

1. List the audit logs you want to trust.
2. Declare a policy for your dependencies.

Then run openvet update to fetch and pin the logs.

TODO: document init’s flags (--policy, --no-comments, etc.) once they stabilise.