Pulumi policy packs can use executable binaries
Introduced 2026-07-28 · score 0.96
HOW TO USE IT
When running a Pulumi preview with an executable policy pack, pass the executable’s path to `--policy-pack`. A neighboring `PulumiPolicy.yaml` may provide the pack’s `version` and `description`.
pulumi preview --policy-pack <path-to-executable>WHY THIS HELPS
Run a policy pack implemented as an executable binary.
BEFORE THIS CHANGE
Policy-pack paths that were not files went through language-runtime lookup; the change runs a file path directly as an executable.
REQUIREMENTS AND LIMITATIONS
- Version: 3.255.0
- --policy-pack <path> (required): Path to the local policy pack; for this task, use the executable binary’s path.
- PulumiPolicy.yaml: version: Sets the policy pack version.
- PulumiPolicy.yaml: description: Sets the policy pack description.
- Prerequisite: The policy pack must be present on disk where Pulumi is run.
- Prerequisite: For an executable pack, the path passed must be a file; Pulumi runs that executable directly.
- The executable binary must be the policy pack path.
FIRST-PARTY EVIDENCE
- https://github.com/pulumi/pulumi/releases/tag/v3.255.0
- https://github.com/pulumi/pulumi/pull/24052
- https://www.pulumi.com/docs/discovery-governance/policy/cli/
Check the installed version and the source before using it. Entry JSON