chainctl
chainctl Chainguard Control
3 min read
For the complete documentation index, see llms.txt.
Create a pull token.
chainctl auth pull-token [flags] --description string Optional description for the pull token.
--name string Optional name for the pull token. (default "pull-token")
--parent string The IAM organization or folder with which the pull token identity is associated.
--repository string Comma-separated repository types to create one pull token for, each one of: oci, apk, javascript, java_athena, dotnet, ruby, java, rust, python, javascript_athena, dotnet_athena, go, go_athena, ruby_athena, python_athena, rust_athena. "all" selects oci and apk. The token gets one role binding per repository type. (default "oci")
--save Save the OCI registry pull token to the Docker configuration.
--ttl ns Time To Live for the validity of the pull token. Valid unit strings range from nanoseconds to hours and are ns, `us`, `ms`, `s`, `m`, and `h`. The maximum depends on the organization's plan: 720h (30 days) for Starter, 168h (7 days) for Team and 8760h (one year) for other plans. (default 720h0m0s) --api string The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
--audience string The Chainguard token audience to request. (default "https://console-api.enforce.dev")
--config string A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
--console string The url of the Chainguard platform Console. (default "https://console.chainguard.dev")
--force-color Force color output even when stdout is not a TTY.
-h, --help Help for chainctl
--issuer string The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
--log-level string Set the log level (debug, info) (default "ERROR")
-o, --output string Output format. One of: [csv, env, go-template, id, json, markdown, none, table, terse, tree, wide]
-v, --v int Set the log verbosity level.chainctl Chainguard Control
chainctl actions Interact with the Chainguard Actions product.
chainctl actions catalog Browse the public Chainguard Actions catalog.
chainctl actions catalog list List Chainguard Actions in the public catalog.
chainctl actions discover Discover GitHub Actions dependencies used by your workflows.
Last updated: 2026-11-03 23:15