Quickstart

This takes about ten minutes and needs no account. You will write one rule, run it, and get an answer.

Install

› brew install axiom
› axiom version
axiom 2.4.0 (darwin/arm64)

Write one rule

Create rules/storage.axiom next to the service it protects. Start with something you already argue about in review.

rule "no public storage" {
  when     resource is "storage bucket"
  require  access is not "public"
  owner    team:platform
}

Run it

Point the checker at what you are about to deploy. It reads the change, reads your rules, and checks the ones that apply.

› axiom check

If everything passes it exits 0. If something fails it exits 1 and names the services, which is what makes it useful as a required check.