chainctl
chainctl Chainguard Control chainctl [flags]Options --api string The url of the Chainguard platform API. (default …
Chainguard generates and emits CloudEvents based on actions that occur within a Chainguard account, such as registering a Kubernetes cluster or creating an IAM invitation. Chainguard also emits events when workloads or policies are changed in a cluster.
Check out this GitHub repository for some sample applications that demonstrate how to use events to create Slack notifications, open GitHub issues, and mirror images.
To subscribe to Chainguard events for your account, use the chainctl
command like this:
chainctl events subscriptions create –parent $YOUR_ORGANIZATION_OR_FOLDER https://<Your webhook URL>
Once you are subscribed to Chainguard events, you will start receiving HTTP POST requests. Each request has a common set of CloudEvent header fields, denoted by the Ce-
prefix. The event body is encoded using JSON and will have two top-level keys, actor
and body
.
The actor
field is the identity of the actor in your Chainguard account that triggered the event, such as a team member or a Kubernetes cluster. The body
field contains the specific data about the event, for example the response status for an invite creation request, or a cluster delete request.
Each Chainguard event includes a Ce-Subject
header that contains a UIDP (UID Path) identifier. Identifiers follow POSIX directory semantics and components are separated by /
delimiters. A UIDP is comprised of:
A globally unique identifier (UID), consisting of 20 bytes, that are URL safe hex encoded. For example, account identities like 0475f6baca584a8964a6bce6b74dbe78dd8805b6
.
One, or multiple /
separated, scoped unique identifiers (SUID). An SUID is 8 bytes that are unique within a scope (like a group), and are URL safe hex encoded. The following is an example SUID: b74ce966caf448d1
. SUIDs are used to identify every entity in Chainguard, from groups, policies, Kubernetes cluster IDs, event subscriptions, to IAM invitations, roles and role-bindings.
Since Chainguard groups can contain child groups, events in a child group will propagate to the parent and thus the UIDP will contain multiple group SUIDs, along with the entity SUID itself. For example, assuming the following components:
0475f6baca584a8964a6bce6b74dbe78dd8805b6
b74ce966caf448d1
b74ce966caf448d1
with its own SUID of dda9aab2d2d90f9e
The complete UIDP in the event’s Ce-Subject
header would be:
0475f6baca584a8964a6bce6b74dbe78dd8805b6/b74ce966caf448d1/dda9aab2d2d90f9e/1a4b29ca6df80013
Every Chainguard event has a JWT formatted OIDC ID token in its Authorization
header. For authorization purposes, there are two important fields to validate:
iss
field to ensure that the issuer is Chainguard, specifically https://issuer.enforce.dev
.sub
field to check that the event matches your configured Chainguard identity. For example, assuming a UIDP ID of 0475f6baca584a8964a6bce6b74dbe78dd8805b6
, the value will resemble the following: webhook:0475f6baca584a8964a6bce6b74dbe78dd8805b6
. If the subscription is in a sub-group, then the value will have the corresponding group SUID appended to the path.Validating these fields before processing the JWT token using a verification library can save resources, as well as alert about suspicious traffic, or misconfigured Chainguard group settings.
The following list of services and methods show example HTTP headers and bodies for public facing Chainguard events.
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: cgr.dev
Ce-Specversion: 1.0
Ce-Subject: The identifier of the repository being pulled from
Ce-Time: 2025-07-16T20:55:19.382198456Z
Ce-Type: dev.chainguard.registry.pull.v1
Content-Length: 777
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"digest": "The digest of the image being pulled",
"error": {
"code": "The OCI distribution-spec error code",
"message": "The error message",
"status": 0
},
"location": "Location holds the detected approximate location of the client who pulled. For example, \"ColumbusOHUS\" or \"Minato City13JP",
"method": "The method used to pull the image. One of: HEAD or GET",
"remote_address": "",
"repo_id": "The identifier of the repository being pulled from",
"repository": "The identifier of the repository being pulled from",
"tag": "The tag of the image being pulled",
"type": "Type determines whether the object being pulled is a manifest or blob",
"user_agent": "The user-agent of the client who pulled",
"when": "2025-07-16T20:55:19.380980"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: cgr.dev
Ce-Specversion: 1.0
Ce-Subject: The identifier of the repository being pushed to
Ce-Time: 2025-07-16T20:55:19.381406471Z
Ce-Type: dev.chainguard.registry.push.v1
Content-Length: 707
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"digest": "The digest of the image being pushed",
"error": {
"code": "The OCI distribution-spec error code",
"message": "The error message",
"status": 0
},
"location": "Location holds the detected approximate location of the client who pushed. For example, \"ColumbusOHUS\" or \"Minato City13JP",
"remote_address": "",
"repo_id": "The identifier of the repository being pushed to",
"repository": "The identifier of the repository being pushed to",
"tag": "The tag of the image being pushed",
"type": "Type determines whether the object being pushed is a manifest or blob",
"user_agent": "The user-agent of the client who pushed",
"when": "2025-07-16T20:55:19.380960"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/auth/v1/register
Ce-Specversion: 1.0
Ce-Subject: Chainguard UIDP
Ce-Time: 2025-07-16T20:55:19.384461992Z
Ce-Type: dev.chainguard.api.auth.registered.v1
Content-Length: 154
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"group": "the group this identity has joined by invitation",
"identity": "Chainguard UIDP"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/events/v1/subscriptions
Ce-Specversion: 1.0
Ce-Subject: UIDP identifier of the subscription
Ce-Time: 2025-07-16T20:55:19.389971105Z
Ce-Type: dev.chainguard.api.events.subscription.created.v1
Content-Length: 152
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"id": "UIDP identifier of the subscription",
"sink": "Webhook endpoint (http/https URL)"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/events/v1/subscriptions
Ce-Specversion: 1.0
Ce-Subject: UIDP identifier of the subscription to delete
Ce-Time: 2025-07-16T20:55:19.390145821Z
Ce-Type: dev.chainguard.api.events.subscription.deleted.v1
Content-Length: 119
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"id": "UIDP identifier of the subscription to delete"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/iam/v1/account_associations
Ce-Specversion: 1.0
Ce-Subject: UIDP with which this account information is associated
Ce-Time: 2025-07-16T20:55:19.390380268Z
Ce-Type: dev.chainguard.api.iam.account_associations.created.v1
Content-Length: 385
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"amazon": {
"account": "Amazon account ID (if applicable)"
},
"description": "description of this association",
"google": {
"project_id": "Google Cloud Project ID (if applicable)",
"project_number": "Google Cloud Project Number (if applicable)"
},
"group": "UIDP with which this account information is associated",
"name": "group name"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/iam/v1/account_associations
Ce-Specversion: 1.0
Ce-Subject: UIDP with which this account information is associated
Ce-Time: 2025-07-16T20:55:19.390756871Z
Ce-Type: dev.chainguard.api.iam.account_associations.updated.v1
Content-Length: 336
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"amazon": {
"account": "amazon account if applicable"
},
"description": "group description",
"google": {
"project_id": "project id if applicable",
"project_number": "project number if applicable"
},
"group": "UIDP with which this account information is associated",
"name": "group name"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/iam/v1/account_associations
Ce-Specversion: 1.0
Ce-Subject: UIDP of the group whose associations will be deleted
Ce-Time: 2025-07-16T20:55:19.391001889Z
Ce-Type: dev.chainguard.api.iam.account_associations.deleted.v1
Content-Length: 129
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"group": "UIDP of the group whose associations will be deleted"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/iam/v1/group_invites
Ce-Specversion: 1.0
Ce-Subject: group UIDP under which this invite resides
Ce-Time: 2025-07-16T20:55:19.391272975Z
Ce-Type: dev.chainguard.api.iam.group_invite.created.v1
Content-Length: 145
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"expiration": {
"seconds": 100
},
"id": "group UIDP under which this invite resides"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/iam/v1/group_invites
Ce-Specversion: 1.0
Ce-Subject: UIDP of the record
Ce-Time: 2025-07-16T20:55:19.391532509Z
Ce-Type: dev.chainguard.api.iam.group_invite.deleted.v1
Content-Length: 92
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"id": "UIDP of the record"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/iam/v1/groups
Ce-Specversion: 1.0
Ce-Subject: group UIDP under which this group resides
Ce-Time: 2025-07-16T20:55:19.389166363Z
Ce-Type: dev.chainguard.api.iam.group.created.v1
Content-Length: 169
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"description": "group description",
"id": "group UIDP under which this group resides",
"name": "group name"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/iam/v1/groups
Ce-Specversion: 1.0
Ce-Subject: group UIDP under which this group resides
Ce-Time: 2025-07-16T20:55:19.389343203Z
Ce-Type: dev.chainguard.api.iam.group.updated.v1
Content-Length: 169
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"description": "group description",
"id": "group UIDP under which this group resides",
"name": "group name"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/iam/v1/groups
Ce-Specversion: 1.0
Ce-Subject: UIDP of the record
Ce-Time: 2025-07-16T20:55:19.389538537Z
Ce-Type: dev.chainguard.api.iam.group.deleted.v1
Content-Length: 92
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"id": "UIDP of the record"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/iam/v1/identities
Ce-Specversion: 1.0
Ce-Subject: UIDP of identity
Ce-Time: 2025-07-16T20:55:19.383525954Z
Ce-Type: dev.chainguard.api.iam.identity.created.v1
Content-Length: 329
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"identity": {
"Relationship": null,
"description": "The human readable description of identity",
"id": "The unique identifier of this specific identity",
"name": "The human readable name of identity"
},
"parent_id": "The Group UIDP path under which the new Identity resides"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/iam/v1/identities
Ce-Specversion: 1.0
Ce-Subject: The unique identifier of this specific identity
Ce-Time: 2025-07-16T20:55:19.383792692Z
Ce-Type: dev.chainguard.api.iam.identity.updated.v1
Content-Length: 245
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"Relationship": null,
"description": "The human readable description of identity",
"id": "The unique identifier of this specific identity",
"name": "The human readable name of identity"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/iam/v1/identities
Ce-Specversion: 1.0
Ce-Subject: UIDP of the record
Ce-Time: 2025-07-16T20:55:19.384069789Z
Ce-Type: dev.chainguard.api.iam.identity.deleted.v1
Content-Length: 92
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"id": "UIDP of the record"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/iam/v1/identityProviders
Ce-Specversion: 1.0
Ce-Subject: UIDP of identity provider
Ce-Time: 2025-07-16T20:55:19.382871833Z
Ce-Type: dev.chainguard.api.iam.identity_providers.created.v1
Content-Length: 378
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"identity_provider": {
"Configuration": null,
"description": "The human readable description of identity provider",
"id": "The UIDP of the IAM group to nest this identity provider under",
"name": "The human readable name of identity provider"
},
"parent_id": "The UIDP of the IAM group to nest this identity provider under"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/iam/v1/identityProviders
Ce-Specversion: 1.0
Ce-Subject: The UIDP of the IAM group to nest this identity provider under
Ce-Time: 2025-07-16T20:55:19.383078639Z
Ce-Type: dev.chainguard.api.iam.identity_providers.updated.v1
Content-Length: 279
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"Configuration": null,
"description": "The human readable description of identity provider",
"id": "The UIDP of the IAM group to nest this identity provider under",
"name": "The human readable name of identity provider"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/iam/v1/identityProviders
Ce-Specversion: 1.0
Ce-Subject: UIDP of the IdP
Ce-Time: 2025-07-16T20:55:19.383245681Z
Ce-Type: dev.chainguard.api.iam.identity_providers.deleted.v1
Content-Length: 89
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"id": "UIDP of the IdP"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/iam/v1/rolebindings
Ce-Specversion: 1.0
Ce-Subject: UIDP of the Role to bind
Ce-Time: 2025-07-16T20:55:19.391777226Z
Ce-Type: dev.chainguard.api.iam.rolebindings.created.v1
Content-Length: 261
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"parent": "The Group UIDP path under which the new RoleBinding resides",
"role_binding": {
"id": "UID of this role binding",
"identity": "UID of the Identity to bind",
"role": "UIDP of the Role to bind"
}
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/iam/v1/rolebindings
Ce-Specversion: 1.0
Ce-Subject: UID of this role binding
Ce-Time: 2025-07-16T20:55:19.392005262Z
Ce-Type: dev.chainguard.api.iam.rolebindings.updated.v1
Content-Length: 173
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"id": "UID of this role binding",
"identity": "UID of the Identity to bind",
"role": "UIDP of the Role to bind"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/iam/v1/rolebindings
Ce-Specversion: 1.0
Ce-Subject: UID of the record
Ce-Time: 2025-07-16T20:55:19.392230803Z
Ce-Type: dev.chainguard.api.iam.rolebindings.deleted.v1
Content-Length: 91
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"id": "UID of the record"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/registry/v1/repos
Ce-Specversion: 1.0
Ce-Subject: The identifier of this specific repository
Ce-Time: 2025-07-16T20:55:19.385458141Z
Ce-Type: dev.chainguard.api.platform.registry.repo.created.v1
Content-Length: 243
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"id": "The identifier of this specific repository",
"name": "The name is the human-readable name of the repository",
"sync_config": {
"expiration": {},
"source": "Repo ID to sync from"
}
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/registry/v1/repos
Ce-Specversion: 1.0
Ce-Subject: The identifier of this specific repository
Ce-Time: 2025-07-16T20:55:19.387513277Z
Ce-Type: dev.chainguard.api.platform.registry.repo.updated.v1
Content-Length: 243
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"id": "The identifier of this specific repository",
"name": "The name is the human-readable name of the repository",
"sync_config": {
"expiration": {},
"source": "Repo ID to sync from"
}
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/registry/v1/repos
Ce-Specversion: 1.0
Ce-Subject: The identifier of this specific repository
Ce-Time: 2025-07-16T20:55:19.388328849Z
Ce-Type: dev.chainguard.api.platform.registry.repo.deleted.v1
Content-Length: 116
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"id": "The identifier of this specific repository"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/registry/v1/tags
Ce-Specversion: 1.0
Ce-Subject: The identifier of this specific tag
Ce-Time: 2025-07-16T20:55:19.388529744Z
Ce-Type: dev.chainguard.api.platform.registry.tag.created.v1
Content-Length: 197
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"digest": "The digest of the manifest with this tag",
"id": "The identifier of this specific tag",
"name": "The unique name of the tag"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/registry/v1/tags
Ce-Specversion: 1.0
Ce-Subject: The identifier of this specific tag
Ce-Time: 2025-07-16T20:55:19.38872Z
Ce-Type: dev.chainguard.api.platform.registry.tag.updated.v1
Content-Length: 197
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"digest": "The digest of the manifest with this tag",
"id": "The identifier of this specific tag",
"name": "The unique name of the tag"
}
}
POST / HTTP/1.1
Host: console-api.enforce.dev
Accept-Encoding: gzip
Authorization: Bearer oidctoken
Ce-Audience: customer
Ce-Group: UID of parent group
Ce-Id: cloudevent generated UUID
Ce-Source: https://console-api.enforce.dev/registry/v1/tags
Ce-Specversion: 1.0
Ce-Subject: The identifier of this specific tag
Ce-Time: 2025-07-16T20:55:19.388883174Z
Ce-Type: dev.chainguard.api.platform.registry.tag.deleted.v1
Content-Length: 109
Content-Type: application/json
User-Agent: Chainguard Enforce
{
"actor": {
"subject": "identity that triggered the event"
},
"body": {
"id": "The identifier of this specific tag"
}
}
Last updated: 2025-07-16 20:55