Product on

Overview of Chainguard's Package Repositories

Thu, 09 Oct 2025 00:00:00 +0000

Chainguard Containers are built using packages from the Wolfi and Chainguard OS Linux distributions. If you need to extend or customize an image, it can be useful to access these packages directly.

Chainguard offers curated package repositories to support containerized workloads and simplify dependency management. These repositories ensure you can access trusted packages — whether building custom container images, working with Chainguard OS, or using Chainguard Containers in production.

This article provides an overview of Chainguard’s package model, highlighting the different Chainguard package repositories available to customers.

Chainguard Events

Tue, 15 Nov 2022 12:05:04 +0000

Chainguard generates and emits CloudEvents based on actions that occur within a Chainguard account, such as registering a Kubernetes cluster or creating an IAM invitation. Chainguard also emits events when workloads or policies are changed in a cluster.

Check out this GitHub repository for some sample applications that demonstrate how to use events to create Slack notifications, open GitHub issues, and mirror images.

To subscribe to Chainguard events for your account, use the chainctl command like this:

Built-in Roles and Capabilities Reference

Thu, 14 Aug 2025 00:00:00 +0000

Chainguard provides customers with a set of built-in roles as part of its Identity and Access Management (IAM) system. These roles have different permissions and capabilities that allow them to serve specialized purposes, from general administrative access to access for specific resources like registries, APK packages, and programming language libraries.

This reference provides an overview of all Chainguard IAM capabilities and shows which built-in roles include each capability. Each capability represents a specific permission or action that can be performed within the Chainguard platform.

Chainguard FIPS TLS Connectivity Requirements

Sat, 15 Nov 2025 08:49:31 +0000

This document provides an overview of FIPS TLS connectivity requirements for using Chainguard FIPS products. These FIPS products have higher minimum TLS requirements, which complicates connecting them to insecure EOL non-FIPS systems, as well as FIPS systems with lapsed (historical) certification.

Chainguard strives to ensure the broadest connectivity possible for its FIPS products. However, many obsolete systems are still widely used and may not be able to connect with Chainguard FIPS products.

How to Use Chainguard Helm Charts

Fri, 11 Jul 2025 08:49:31 +0000

Helm is a package manager for Kubernetes that simplifies the installation and management of applications by automating the creation of Kubernetes resources. Helm charts are reusable, versioned packages that define a collection of Kubernetes resources required to run an application or service. You use Helm to define, install, and perform upgrades to your applications on Kubernetes.

For organizations looking to deploy their Chainguard container images with Helm, Chainguard provides upstream-produced Helm charts. These charts are available from the Chainguard Registry and are intended for customers who are either looking to get started with Helm or are looking for better, trusted alternatives to the public charts they may already be using.

How to Use Chainguard iamguarded Helm Charts

Fri, 11 Jul 2025 08:49:31 +0000

Chainguard offers this limited iamguarded set of Helm charts to go with a set of Chainguard-created containers labeled as iamguarded, designed specifically to support organizations migrating off of Bitnami. The iamguarded charts are forked from upstream Bitnami charts, but now configured out-of-the box for use with Chainguard’s hardened container images. These charts only receive edits necessary to make them work with Chainguard container images and retain the intended functionality of the originals they are based on. Because the iamguarded charts are forks, they may be susceptible to breaking changes introduced by the upstream. In such cases, customers should plan to transition to a community-provided alternative (or an equivalent one from Chainguard) where possible.

Proxy and cache Helm Charts with Artifactory

Mon, 14 Jul 2025 08:10:31 +0000

This page shows you how to set up and use Chainguard Helm Charts with Artifactory via remote Helm OCI repositories.

Create and configure Helm OCI repository in Artifactory

From the administration panel within Artifactory, create a remote repository, picking Helm as the repo type. we’ll call it iamguarded-charts

Chainguard Trademark Use Policy

Fri, 06 Dec 2024 15:21:01 +0200

Chainguard has a Trademark Use Policy for Chainguard™ and Wolfi™. The Trademark Use Policy for Chainguard™ is in connection with its software tools and platforms for container image registry services and related educational services. The Trademark Use Policy for Wolfi™ is in connection with software tools and related community services. This policy helps ensure that Chainguard’s trademarks remain reliable indicators of the qualities that they are meant to preserve.

The Trademark Policy details:

chainctl

Wed, 01 Jul 2026 03:32:22 +0000

chainctl

Chainguard Control

chainctl actions

Wed, 01 Jul 2026 03:32:22 +0000

chainctl actions

Interact with the Chainguard Actions product.

chainctl actions catalog

Wed, 01 Jul 2026 03:32:22 +0000

chainctl actions catalog

Browse the public Chainguard Actions catalog.

chainctl actions catalog list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl actions catalog list

List Chainguard Actions in the public catalog.

chainctl actions discover

Wed, 01 Jul 2026 03:32:22 +0000

chainctl actions discover

Discover GitHub Actions dependencies used by your workflows.

chainctl actions entitlements

Wed, 01 Jul 2026 03:32:22 +0000

chainctl actions entitlements

Manage Actions product entitlements.

chainctl actions entitlements create

Wed, 01 Jul 2026 03:32:22 +0000

chainctl actions entitlements create

Enable the Actions product for an organization.

chainctl actions entitlements delete

Wed, 01 Jul 2026 03:32:22 +0000

chainctl actions entitlements delete

Disable the Actions product for an organization.

chainctl actions entitlements list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl actions entitlements list

List Actions product entitlements for an organization.

chainctl actions list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl actions list

List Chainguard Actions catalog entries for an organization.

chainctl agent

Wed, 01 Jul 2026 03:32:22 +0000

chainctl agent

Agent-powered commands.

chainctl agent accept-terms

Wed, 01 Jul 2026 03:32:22 +0000

chainctl agent accept-terms

Accept required legal terms.

chainctl auth

Wed, 01 Jul 2026 03:32:22 +0000

chainctl auth

Auth related commands for the Chainguard platform.

chainctl auth configure-docker

Wed, 01 Jul 2026 03:32:22 +0000

chainctl auth configure-docker

Configure a Docker credential helper

chainctl auth configure-npm

Wed, 01 Jul 2026 03:32:22 +0000

chainctl auth configure-npm

Configure npm credentials for Chainguard Libraries for JavaScript

chainctl auth delete-account

Wed, 01 Jul 2026 03:32:22 +0000

chainctl auth delete-account

Permanently delete your user account.

chainctl auth login

Wed, 01 Jul 2026 03:32:22 +0000

chainctl auth logout

Wed, 01 Jul 2026 03:32:22 +0000

chainctl auth logout

Logout from the Chainguard platform.

chainctl auth pull-token

Wed, 01 Jul 2026 03:32:22 +0000

chainctl auth pull-token

Create a pull token.

chainctl auth pull-token create

Wed, 01 Jul 2026 03:32:22 +0000

chainctl auth pull-token create

Create a pull token.

chainctl auth pull-token list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl auth pull-token list

List all pull-tokens

chainctl auth status

Wed, 01 Jul 2026 03:32:22 +0000

chainctl auth status

Inspect the local Chainguard Token.

chainctl auth token

Wed, 01 Jul 2026 03:32:22 +0000

chainctl auth token

Print the local Chainguard Token.

chainctl auth token capabilities

Wed, 01 Jul 2026 03:32:22 +0000

chainctl auth token capabilities

Print the capabilities of the local Chainguard Token.

chainctl config

Wed, 01 Jul 2026 03:32:22 +0000

chainctl config

Local config file commands for chainctl.

chainctl config edit

Wed, 01 Jul 2026 03:32:22 +0000

chainctl config edit

Edit the current chainctl config file.

chainctl config reset

Wed, 01 Jul 2026 03:32:22 +0000

chainctl config reset

Remove local chainctl config files and restore defaults.

chainctl config save

Wed, 01 Jul 2026 03:32:22 +0000

chainctl config save

Save the current chainctl config to a config file.

chainctl config set

Wed, 01 Jul 2026 03:32:22 +0000

chainctl config set

Set an individual configuration value property.

chainctl config unset

Wed, 01 Jul 2026 03:32:22 +0000

chainctl config unset

Unset a configuration property and return it to default.

chainctl config validate

Wed, 01 Jul 2026 03:32:22 +0000

chainctl config validate

Run diagnostics on local config.

chainctl config view

Wed, 01 Jul 2026 03:32:22 +0000

chainctl config view

View the current chainctl config.

chainctl events

Wed, 01 Jul 2026 03:32:22 +0000

chainctl events

Events related commands for the Chainguard platform.

chainctl events subscriptions

Wed, 01 Jul 2026 03:32:22 +0000

chainctl events subscriptions

Subscription interactions.

chainctl events subscriptions create

Wed, 01 Jul 2026 03:32:22 +0000

chainctl events subscriptions create

Subscribe to events under an organization or folder.

chainctl events subscriptions delete

Wed, 01 Jul 2026 03:32:22 +0000

chainctl events subscriptions delete

Delete a subscription.

chainctl events subscriptions list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl events subscriptions list

List subscriptions.

chainctl guardener

Wed, 01 Jul 2026 03:32:22 +0000

chainctl guardener

Manage guardener integrations.

chainctl guardener github

Wed, 01 Jul 2026 03:32:22 +0000

chainctl guardener github

Link and unlink a GitHub organization to a Chainguard group.

chainctl guardener github link

Wed, 01 Jul 2026 03:32:22 +0000

chainctl guardener github link

Link a GitHub organization to a Chainguard group.

chainctl guardener github unlink

Wed, 01 Jul 2026 03:32:22 +0000

chainctl guardener github unlink

Unlink a GitHub organization from its Chainguard group.

chainctl iam

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam

IAM related commands for the Chainguard platform.

chainctl iam account-associations

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam account-associations

Configure and manage cloud provider account associations.

chainctl iam account-associations check

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam account-associations check

Check the OIDC federation configurations for cloud providers.

chainctl iam account-associations check aws

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam account-associations check aws

Checks that the given location has been properly configured for OIDC federation with AWS

chainctl iam account-associations check azure

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam account-associations check azure

Checks that the given location has been properly configured for OIDC federation with AZURE

chainctl iam account-associations check gcp

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam account-associations check gcp

Checks that the given location has been properly configured for OIDC federation with GCP

chainctl iam account-associations describe

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam account-associations describe

Describe cloud provider account associations for a location.

chainctl iam account-associations set

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam account-associations set

Set cloud provider account associations for a location.

chainctl iam account-associations set aws

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam account-associations set aws

Set AWS account association for a location.

chainctl iam account-associations set azure

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam account-associations set azure

Set AZURE account association for a location.

chainctl iam account-associations set gcp

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam account-associations set gcp

Set GCP account association for a location.

chainctl iam account-associations unset

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam account-associations unset

Remove cloud provider account associations from a location.

chainctl iam account-associations unset aws

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam account-associations unset aws

Remove AWS account configuration for a location.

chainctl iam account-associations unset azure

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam account-associations unset azure

Remove AZURE account configuration for a location.

chainctl iam account-associations unset gcp

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam account-associations unset gcp

Remove GCP account configuration for a location.

chainctl iam external-group-role-mappings

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam external-group-role-mappings

Manage IdP group-to-role mappings.

chainctl iam external-group-role-mappings create

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam external-group-role-mappings create

Create an IdP group-to-role mapping.

chainctl iam external-group-role-mappings delete

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam external-group-role-mappings delete

Delete IdP group-to-role mappings.

chainctl iam external-group-role-mappings list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam external-group-role-mappings list

List IdP group-to-role mappings.

chainctl iam folders

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam folders

IAM folders interactions.

chainctl iam folders delete

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam folders delete

Delete a folder.

chainctl iam folders describe

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam folders describe

Describe a folder.

chainctl iam folders list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam folders list

List folders under an organization.

chainctl iam folders update

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam folders update

Update a folder.

chainctl iam identities

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam identities

Identity management.

chainctl iam identities create

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam identities create

Create a new identity.

chainctl iam identities create aws

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam identities create aws

Create a new identity for an AWS IAM resource.

chainctl iam identities create aws role

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam identities create aws role

chainctl iam identities create aws role NAME --aws-account-id=ACCOUNT --aws-role-name=NAME [--aws-role-id=ID] [--aws-partition=PARTITION] [--parent=PARENT] [--description=DESC] [--role=ROLE,ROLE,...] [--output=id|json|table]

Examples

 # Create an assumable identity for an AWS IAM role.
chainctl iam identities create aws role my-aws-identity --aws-account-id=123456789012 --aws-role-name=my-role
# Create an assumable identity for an AWS IAM role. Bind it to the registry.pull role.
chainctl iam identities create aws role my-aws-identity --aws-account-id=123456789012 --aws-role-name=my-role --role=registry.pull
# Provide the unique ID of an AWS IAM role. This prevents the identity from being assumed if the role is deleted and then recreated with the same name.
chainctl iam identities create aws role my-aws-identity --aws-account-id=123456789012 --aws-role-name=my-role --aws-role-id=AROAEXAMPLEC2UL7LUB
# Create an assumable identity for an AWS IAM role in the aws-us-gov partition.
chainctl iam identities create aws role my-aws-identity --aws-partition=aws-us-gov --aws-account-id=123456789012 --aws-role-name=my-role

Options

 --aws-account-id string The ID of the AWS account.
--aws-partition string The partition in which the role is located. For instance: aws, aws-cn or aws-us-gov. (default "aws")
--aws-role-id string The unique ID of the IAM role.
--aws-role-name string The name of the IAM role.
-d, --description string The description of the resource.
-n, --name string Given name of the resource.
--parent string The name or id of the parent location to create this identity under.
--role strings A comma separated list of names or IDs of roles to bind this identity to (optional).
-y, --yes Automatic yes to prompts; assume "yes" as answer to all prompts and run non-interactively.

Options inherited from parent commands

 --api string The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
--audience string The Chainguard token audience to request. (default "https://console-api.enforce.dev")
--config string A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
--console string The url of the Chainguard platform Console. (default "https://console.chainguard.dev")
--force-color Force color output even when stdout is not a TTY.
-h, --help Help for chainctl
--issuer string The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
--log-level string Set the log level (debug, info) (default "ERROR")
-o, --output string Output format. One of: [csv, env, go-template, id, json, markdown, none, table, terse, tree, wide]
-v, --v int Set the log verbosity level.

chainctl iam identities create aws user

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam identities create aws user

chainctl iam identities create aws user NAME --aws-account-id=ACCOUNT --aws-user-name=NAME [--aws-user-id=ID] [--aws-partition=PARTITION] [--parent=PARENT] [--description=DESC] [--role=ROLE,ROLE,...] [--output=id|json|table]

Examples

 # Create an assumable identity for an IAM user
chainctl iam identities create aws user my-aws-identity --aws-account-id=123456789012 --aws-user-name=my-user
# Create an assumable identity for an IAM user. Bind it to the registry.pull role.
chainctl iam identities create aws user my-aws-identity --aws-account-id=123456789012 --aws-user-name=my-user --role=registry.pull
# Provide the unique ID of the user. This prevents the identity from being assumed if the user is deleted and then recreated with the same name.
chainctl iam identities create aws user my-aws-identity --aws-account-id=123456789012 --aws-user-name=my-user --aws-user-id=AIDAEXAMPLEC2UL7LUB
# Create an assumable identity for a user in the aws-us-gov partition
chainctl iam identities create aws user my-aws-identity --aws-partition=aws-us-gov --aws-account-id=123456789012 --aws-user-name=my-user

Options

 --aws-account-id string The ID of the AWS account.
--aws-partition string The partition in which the user is located. For instance: aws, aws-cn or aws-us-gov. (default "aws")
--aws-user-id string The unique ID of the IAM user.
--aws-user-name string The name of the IAM user.
-d, --description string The description of the resource.
-n, --name string Given name of the resource.
--parent string The name or id of the parent location to create this identity under.
--role strings A comma separated list of names or IDs of roles to bind this identity to (optional).
-y, --yes Automatic yes to prompts; assume "yes" as answer to all prompts and run non-interactively.

Options inherited from parent commands

 --api string The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
--audience string The Chainguard token audience to request. (default "https://console-api.enforce.dev")
--config string A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
--console string The url of the Chainguard platform Console. (default "https://console.chainguard.dev")
--force-color Force color output even when stdout is not a TTY.
-h, --help Help for chainctl
--issuer string The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
--log-level string Set the log level (debug, info) (default "ERROR")
-o, --output string Output format. One of: [csv, env, go-template, id, json, markdown, none, table, terse, tree, wide]
-v, --v int Set the log verbosity level.

chainctl iam identities create github

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam identities create github

chainctl iam identities create github NAME --github-repo=REPO [--github-ref=REF] [--github-audience=AUD] [--parent=PARENT] [--description=DESC] [--role=ROLE,ROLE,...] [--output=id|json|table]

Examples

 # Create a GitHub Actions identity for any branch in a repo
chainctl iam identities create github my-gha-identity --github-repo=my-org/repo-name --parent=eng-org
# Create a GitHub Actions identity for a given branch in a repo and bind to a role
chainctl iam identities create github my-gha-identity --github-repo=my-org/repo-name --github-ref=refs/heads/test-branch --role=owner

Options

 -d, --description string The description of the resource.
--github-audience string The audience for the GitHub OIDC token
--github-ref string The branch reference for the executing action (optional).
--github-repo string The name of a GitHub repo where the action executes.
-n, --name string Given name of the resource.
--parent string The name or id of the parent location to create this identity under.
--role strings A comma separated list of names or IDs of roles to bind this identity to (optional).
-y, --yes Automatic yes to prompts; assume "yes" as answer to all prompts and run non-interactively.

Options inherited from parent commands

 --api string The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
--audience string The Chainguard token audience to request. (default "https://console-api.enforce.dev")
--config string A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
--console string The url of the Chainguard platform Console. (default "https://console.chainguard.dev")
--force-color Force color output even when stdout is not a TTY.
-h, --help Help for chainctl
--issuer string The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
--log-level string Set the log level (debug, info) (default "ERROR")
-o, --output string Output format. One of: [csv, env, go-template, id, json, markdown, none, table, terse, tree, wide]
-v, --v int Set the log verbosity level.

chainctl iam identities create gitlab

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam identities create gitlab

chainctl iam identities create gitlab NAME --project-path=GITLAB-GROUP/GITLAB-PROJECT --ref-type={tag|branch} [--ref=REF] [--parent=PARENT] [--description=DESC] [--role=ROLE,ROLE,...] [--output=id|json|table]

Examples

 # Create a Gitlab CI identity for any branch in a given Gitlab project
chainctl iam identities create gitlab my-gitlab-identity --project-path=my-group/my-project --ref-type=branch --parent=eng-org
# Create a Gitlab CI identity for a given branch in a Gitlab project and bind to a role
chainctl iam identities create gitlab my-gitlab-identity --project-path=my-group/my-project --ref-type=branch --ref=main --role=owner

Options

 -d, --description string The description of the resource.
-n, --name string Given name of the resource.
--parent string The name or id of the parent location to create this identity under.
--project-path string The name of a Gitlab project where the action executes in the form "group-name/project-name[/foo/bar]". You can use a "*" for project-name (or sub-projects) to match any project in the group.
--ref string The reference for the executing action. If left empty or "*", all references will match.
--ref-type string The type of reference for the executing action, must be either "tag" or "branch".
--role strings A comma separated list of names or IDs of roles to bind this identity to (optional).
-y, --yes Automatic yes to prompts; assume "yes" as answer to all prompts and run non-interactively.

Options inherited from parent commands

 --api string The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
--audience string The Chainguard token audience to request. (default "https://console-api.enforce.dev")
--config string A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
--console string The url of the Chainguard platform Console. (default "https://console.chainguard.dev")
--force-color Force color output even when stdout is not a TTY.
-h, --help Help for chainctl
--issuer string The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
--log-level string Set the log level (debug, info) (default "ERROR")
-o, --output string Output format. One of: [csv, env, go-template, id, json, markdown, none, table, terse, tree, wide]
-v, --v int Set the log verbosity level.

chainctl iam identities delete

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam identities delete

Delete one or more identities.

chainctl iam identities describe

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam identities describe

View the details of an identity.

chainctl iam identities list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam identities list

List identities.

chainctl iam identities update

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam identities update

Update an identity

chainctl iam identity-providers

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam identity-providers

customer managed identity provider management

chainctl iam identity-providers create

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam identity-providers create

Create an identity provider

chainctl iam identity-providers delete

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam identity-providers delete

Delete an identity provider.

chainctl iam identity-providers list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam identity-providers list

List identity providers.

chainctl iam identity-providers update

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam identity-providers update

Update an identity provider

chainctl iam invites

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam invites

Manage invite codes that register identities with Chainguard.

chainctl iam invites create

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam invites create

Generate an invite code to identities with Chainguard.

chainctl iam invites delete

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam invites delete

Delete invite codes

chainctl iam invites list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam invites list

List organization and folder invites.

chainctl iam organizations

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam organizations

IAM organization interactions.

chainctl iam organizations delete

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam organizations delete

Delete an organization.

chainctl iam organizations describe

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam organizations describe

Describe an organization.

chainctl iam organizations list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam organizations list

List organizations.

chainctl iam role-bindings

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam role-bindings

IAM role-bindings resource interactions.

chainctl iam role-bindings create

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam role-bindings create

Create a role-binding

chainctl iam role-bindings delete

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam role-bindings delete

Delete a role-binding.

chainctl iam role-bindings list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam role-bindings list

List role-bindings.

chainctl iam role-bindings update

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam role-bindings update

Update a role-binding.

chainctl iam roles

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam roles

IAM role resource interactions.

chainctl iam roles capabilities

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam roles capabilities

IAM role capabilities

chainctl iam roles capabilities list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam roles capabilities list

List IAM role capabilities.

chainctl iam roles create

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam roles create

Create an IAM role.

chainctl iam roles delete

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam roles delete

Delete a custom IAM role.

chainctl iam roles list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam roles list

List IAM roles.

chainctl iam roles update

Wed, 01 Jul 2026 03:32:22 +0000

chainctl iam roles update

Update an IAM role.

chainctl images

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images

Images related commands for the Chainguard platform.

chainctl images advisories

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images advisories

Security advisory commands for images.

chainctl images advisories list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images advisories list

List security advisories for packages in an image.

chainctl images changelog

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images changelog

Show changelog for image history

chainctl images diff

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images diff

Diff images.

chainctl images entitlements

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images entitlements

Manage entitlements to registry repositories.

chainctl images entitlements list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images entitlements list

List registry entitlements of an organization.

chainctl images helm

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images helm

Helm chart related commands

chainctl images helm refs

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images helm refs

List image references pinned in a Chainguard Helm chart

chainctl images helm values

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images helm values

Generate relocation overrides for a Chainguard Helm chart

chainctl images history

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images history

Show history for a specific image tag.

chainctl images list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images list

List tagged images from Chainguard registries.

chainctl images repos

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images repos

Image repo related commands for the Chainguard platform.

chainctl images repos build

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images repos build

Manage custom image builds

chainctl images repos build apply

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images repos build apply

Apply a build config

chainctl images repos build edit

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images repos build edit

Edit a build config, optionally creating a new repo with –save-as

chainctl images repos build list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images repos build list

List build reports

chainctl images repos build logs

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images repos build logs

Get build logs

chainctl images repos create

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images repos create

Create an image repository.

chainctl images repos delete

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images repos delete

Remove an image repository.

chainctl images repos list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images repos list

List image repositories.

chainctl images repos update

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images repos update

Update image repositories.

chainctl images tags

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images tags

Tags related commands for images.

chainctl images tags list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images tags list

List tags from repositories using –parent, –public, or –repo flags.

chainctl images tags resolve

Wed, 01 Jul 2026 03:32:22 +0000

chainctl images tags resolve

Resolve tags for a specific image reference.

chainctl libraries

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries

Ecosystem library related commands.

chainctl libraries entitlements

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries entitlements

Manage entitlements to language ecosystem libraries.

chainctl libraries entitlements create

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries entitlements create

Create ecosystem library entitlements for an organization.

chainctl libraries entitlements delete

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries entitlements delete

Delete an ecosystem library entitlement from an organization.

chainctl libraries entitlements list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries entitlements list

List entitlements of an organization.

chainctl libraries packages

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries packages

Inspect Libraries packages.

chainctl libraries packages blocked

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries packages blocked

List blocked Libraries packages.

chainctl libraries packages count

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries packages count

Count Libraries packages per ecosystem.

chainctl libraries packages list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries packages list

List Libraries packages.

chainctl libraries packages versions

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries packages versions

List the versions of a Libraries package.

chainctl libraries policy

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries policy

Manage Libraries policies.

chainctl libraries policy binding

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries policy binding

Manage Libraries policy bindings.

chainctl libraries policy binding create

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries policy binding create

Create a Libraries policy binding.

chainctl libraries policy binding delete

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries policy binding delete

Delete a Libraries policy binding.

chainctl libraries policy binding list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries policy binding list

List Libraries policy bindings.

chainctl libraries policy binding update

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries policy binding update

Update a Libraries policy binding.

chainctl libraries policy create

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries policy create

Create a custom Libraries policy.

chainctl libraries policy delete

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries policy delete

Delete a custom Libraries policy.

chainctl libraries policy describe

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries policy describe

Describe a Libraries policy.

chainctl libraries policy disable

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries policy disable

Disable a Libraries policy for an organization.

chainctl libraries policy enable

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries policy enable

Enable a Libraries policy for an organization.

chainctl libraries policy list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries policy list

List Libraries policies.

chainctl libraries policy update

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries policy update

Update a custom Libraries policy.

chainctl libraries update-hashes

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries update-hashes

Update lockfile integrity hashes with Chainguard Libraries checksums

chainctl libraries verify

Wed, 01 Jul 2026 03:32:22 +0000

chainctl libraries verify

A tool to analyze the use of Chainguard Libraries in various artifacts

chainctl packages

Wed, 01 Jul 2026 03:32:22 +0000

chainctl packages

Interact with Chainguard packages

chainctl packages versions

Wed, 01 Jul 2026 03:32:22 +0000

chainctl packages versions

Package version related commands for the Chainguard platform.

chainctl packages versions list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl packages versions list

List version stream data for a managed package.

chainctl policies

Wed, 01 Jul 2026 03:32:22 +0000

chainctl policies

Manage policies.

chainctl policies binding

Wed, 01 Jul 2026 03:32:22 +0000

chainctl policies binding

Manage policy bindings.

chainctl policies binding create

Wed, 01 Jul 2026 03:32:22 +0000

chainctl policies binding create

Create a policy binding.

chainctl policies binding delete

Wed, 01 Jul 2026 03:32:22 +0000

chainctl policies binding delete

Delete a policy binding.

chainctl policies binding list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl policies binding list

List policy bindings.

chainctl policies check

Wed, 01 Jul 2026 03:32:22 +0000

chainctl policies check

Check an image against active policies.

chainctl policies decision

Wed, 01 Jul 2026 03:32:22 +0000

chainctl policies decision

Inspect policy decisions.

chainctl policies decision list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl policies decision list

List policy decisions.

chainctl policies describe

Wed, 01 Jul 2026 03:32:22 +0000

chainctl policies describe

Describe a policy and its parameter schema.

chainctl policies disable

Wed, 01 Jul 2026 03:32:22 +0000

chainctl policies disable

Disable a policy.

chainctl policies enable

Wed, 01 Jul 2026 03:32:22 +0000

chainctl policies enable

Enable a policy for an organization.

chainctl policies list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl policies list

List policies.

chainctl skills

Wed, 01 Jul 2026 03:32:22 +0000

chainctl skills

Skills registry related commands.

chainctl skills accept-terms

Wed, 01 Jul 2026 03:32:22 +0000

chainctl skills accept-terms

Accept legal terms required to publish skills.

chainctl skills delete

Wed, 01 Jul 2026 03:32:22 +0000

chainctl skills delete

Remove a published version of a skill.

chainctl skills describe

Wed, 01 Jul 2026 03:32:22 +0000

chainctl skills describe

Show metadata for a published skill.

chainctl skills entitlements

Wed, 01 Jul 2026 03:32:22 +0000

chainctl skills entitlements

Manage skills entitlements for an organization.

chainctl skills entitlements create

Wed, 01 Jul 2026 03:32:22 +0000

chainctl skills entitlements create

Create a skills entitlement for an organization.

chainctl skills entitlements delete

Wed, 01 Jul 2026 03:32:22 +0000

chainctl skills entitlements delete

Delete the skills entitlement from an organization.

chainctl skills entitlements list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl skills entitlements list

List skills entitlements of an organization.

chainctl skills install

Wed, 01 Jul 2026 03:32:22 +0000

chainctl skills install

Download a skill and install it into agent directories.

chainctl skills list

Wed, 01 Jul 2026 03:32:22 +0000

chainctl skills list

List skills published by an org.

chainctl skills pull

Wed, 01 Jul 2026 03:32:22 +0000

chainctl skills pull

Download a published skill to a local directory.

chainctl skills push

Wed, 01 Jul 2026 03:32:22 +0000

chainctl skills push

Package a skill directory and publish it to skills.cgr.dev.

chainctl skills uninstall

Wed, 01 Jul 2026 03:32:22 +0000

chainctl skills uninstall

Remove a skill from agent directories on the local machine.

chainctl skills validate

Wed, 01 Jul 2026 03:32:22 +0000

chainctl skills validate

Check a skill directory for spec compliance without making network calls.

chainctl skills versions

Wed, 01 Jul 2026 03:32:22 +0000

chainctl skills versions

List all published versions (tags) for a skill.

chainctl starter

Wed, 01 Jul 2026 03:32:22 +0000

chainctl starter

Manage catalog starter organizations

chainctl starter add-images

Wed, 01 Jul 2026 03:32:22 +0000

chainctl starter add-images

Add catalog images to your catalog starter organization.

chainctl starter init

Wed, 01 Jul 2026 03:32:22 +0000

chainctl starter init

Initialize a new catalog starter organization.

chainctl starter request-access

Wed, 01 Jul 2026 03:32:22 +0000

chainctl starter request-access

Request access to a catalog starter organization.

chainctl starter status

Wed, 01 Jul 2026 03:32:22 +0000

chainctl starter status

Show catalog starter organization status, quota, and image readiness.

chainctl update

Wed, 01 Jul 2026 03:32:22 +0000

chainctl update

Update chainctl.

chainctl version

Wed, 01 Jul 2026 03:32:22 +0000

chainctl version

Prints the version