chainctl
chainctl Chainguard Control
1 min read
For the complete documentation index, see llms.txt.
Add catalog images to an organization’s entitlements.
Add catalog images to an organization’s entitlements by name.
Images are resolved against the catalog by exact name match. By default the server picks the newest active entitlement with matching tier capacity. Use –entitlement-uidp to target a specific entitlement.
chainctl images entitlements add-images [--parent=PARENT | --entitlement-uidp=UIDP] IMAGE_NAME [IMAGE_NAME ...] [flags] --entitlement-uidp string Target a specific entitlement by UIDP instead of selecting by --parent.
--parent string The name or id of the org whose newest eligible entitlement should receive the images. --api string The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
--audience string The Chainguard token audience to request. (default "https://console-api.enforce.dev")
--config string A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
--console string The url of the Chainguard platform Console. (default "https://console.chainguard.dev")
--force-color Force color output even when stdout is not a TTY.
-h, --help Help for chainctl
--issuer string The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
--log-level string Set the log level (debug, info) (default "ERROR")
-o, --output string Output format. One of: [csv, env, go-template, id, json, markdown, none, table, terse, tree, wide]
-v, --v int Set the log verbosity level.Last updated: 2026-04-28 21:11