# armoctl-runtime-policies

> Claude/Codex skill by [@armosec](https://omgskills.com/library/armosec/index.md) · 0 stars · Updated 2026-10-22

Runtime policies — bundles of rules attached to clusters/namespaces/workloads. Use to manage which detection rules apply where.

## Install

```sh
git clone https://github.com/armosec/armoctl /tmp/armoctl && ln -s /tmp/armoctl/skills/armoctl-runtime-policies ~/.claude/skills/armoctl-runtime-policies
```

## From README

armoctl-runtime-policies A policy is a bag of runtime-rules with a binding scope (cluster, namespace, workload). When a workload runs, the union of policies that bind to it determines which rules evaluate. Commands create — Create a runtime policy Flags: --description (string) Policy description --enabled (bool) Enable the policy --name (string) Policy name (required) --policy-file (string) Path to JSON file containing the full policy body fields — Print the runtime-policies resource cheatsheet list — List runtime policies Flags: --rulesettype (string) Filter by ruleset type (Managed or Custom) update \[guid\] — Update a runtime policy Flags: --description (string) Policy description --enabled (string) Enable/disable the policy (true|false) --name (string) Policy name --policy-file (string) Path to JSON file containing policy updates Resource fields runtime-policies | Field | Description | |---|---| | guid | Stable policy ID. | | name | Policy name.

## Links

- HTML page: https://omgskills.com/library/armosec/armoctl/skills/armoctl-runtime-policies/
- GitHub: https://github.com/armosec/armoctl
- Author: [@armosec](https://omgskills.com/library/armosec/index.md)

## More from this repo

- [armoctl](https://omgskills.com/library/armosec/armoctl/skills/armoctl/index.md) — ARMO security platform CLI — JSON-first agent-friendly access to runtime incidents, vulnerabilities, posture, risks,...
   - [@armosec](https://omgskills.com/library/armosec/index.md) · 0 stars
- [armoctl-attack-chains](https://omgskills.com/library/armosec/armoctl/skills/armoctl-attack-chains/index.md) — Attack chains — multi-step kill-chain views built by ARMO from runtime + posture signal.
   - [@armosec](https://omgskills.com/library/armosec/index.md) · 0 stars
- [armoctl-cloud-accounts](https://omgskills.com/library/armosec/armoctl/skills/armoctl-cloud-accounts/index.md) — Cloud account onboarding — list/connect/disconnect ECS accounts.
   - [@armosec](https://omgskills.com/library/armosec/index.md) · 0 stars