chainctl

manage Chainguard container images and resources

TLDR

Authenticate with Chainguard
$ chainctl auth login
List available container images
$ chainctl images list
List image tags
$ chainctl images tags list [image_name]
Get image details
$ chainctl images describe [image_name]
List organizations
$ chainctl iam organizations list
Configure chainctl settings
$ chainctl config set [key] [value]

SYNOPSIS

chainctl [--api url] [--config file] [-o format] [--log-level level] command [subcommand] [arguments...]

DESCRIPTION

chainctl (Chainguard Control) is the command-line interface for managing Chainguard resources, including security-hardened container images, identity management, and platform configurations.The CLI follows the context noun verb style of interaction, allowing users to discover available images, analyze security metadata, manage organizations, and control access to Chainguard resources.

PARAMETERS

--api url

Chainguard platform API URL (default: https://console-api.enforce.dev)
--config file
Path to chainctl config file (or set CHAINCTL_CONFIG)
-o, --output format
Output format: csv, json, table, tree, wide, markdown, yaml, or go-template
--log-level level
Log level: debug, info (default: ERROR)
--force-color
Force color output
Main commands:auth - Authentication commands (login, logout, token)images - Manage container images (list, describe, tags)iam - Identity and access managementpackages - Interact with Chainguard packagesconfig - Manage chainctl configuration

CONFIGURATION

CHAINCTL_CONFIG

Environment variable specifying an alternate configuration file location.

CAVEATS

Requires a Chainguard account for authentication. Some commands require appropriate IAM permissions within your organization.

HISTORY

chainctl was developed by Chainguard as part of their secure software supply chain platform. Chainguard focuses on providing minimal, hardened container images with reduced attack surfaces and continuous security updates.

SEE ALSO

docker(1), cosign(1)

RESOURCES

Documentation