chainctl
chainctl Chainguard Control
For the complete documentation index, see llms.txt.
Local config file commands for chainctl.
Local config file commands for chainctl.
Every config property can also be set with an environment variable, which is
useful for scripts and CI. Take the property name, uppercase it, replace dots
with underscores, and add a CHAINGUARD_ prefix:
default.group becomes CHAINGUARD_DEFAULT_GROUPplatform.api becomes CHAINGUARD_PLATFORM_APIoutput.silent becomes CHAINGUARD_OUTPUT_SILENTEnvironment variables take precedence over the config file, and command line flags take precedence over both.
Setting default.group supplies the default for –parent, so exporting
CHAINGUARD_DEFAULT_GROUP avoids passing –parent to every command.
--api string The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
--audience string The Chainguard token audience to request. (default "https://console-api.enforce.dev")
--config string A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
--console string The url of the Chainguard platform Console. (default "https://console.chainguard.dev")
--force-color Force color output even when stdout is not a TTY.
-h, --help Help for chainctl
--issuer string The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
--log-level string Set the log level (debug, info) (default "ERROR")
-o, --output string Output format. One of: [csv, env, go-template, id, json, markdown, none, table, terse, tree, wide]
-v, --v int Set the log verbosity level.Last updated: 2026-08-18 17:09