> ## Documentation Index > Fetch the complete documentation index at: https://docs.chainloop.dev/llms.txt > Use this file to discover all available pages before exploring further. # Command Line Reference (EE) The Chainloop CLI Enterprise Edition is a proprietary extension of the open-source Chainloop CLI that provides additional features and capabilities for enterprise users. It extends the existing Chainloop CLI with platform-specific functionality while maintaining full compatibility with the core Chainloop commands. This reference documents all commands available in the Enterprise Edition, including both the core open-source commands and the enterprise-specific extensions. For installation instructions, see the [CLI Installation Guide](/command-line-reference/cli-installation). ## chainloop apply Apply compliance resources from YAML files Synopsis Apply compliance resources from a YAML file or directory. Supports multi-document YAML files with mixed resource kinds. ``` chainloop apply [flags] ``` Examples ``` Apply resources from a single file chainloop apply -f my-framework.yaml Preview what would change without applying chainloop apply -f my-framework.yaml --dry-run Apply resources from a directory chainloop apply -f ./compliance/ Output as JSON for CI/CD consumption chainloop apply -f ./compliance/ --dry-run -o json Validate a batch offline (no server needed) chainloop apply -f ./compliance/ --dry-run --offline ``` Options ``` --dry-run preview changes without applying them -f, --file string path to a YAML file or directory -h, --help help for apply --offline validate cross-references against batch contents only, without querying the server (requires --dry-run) ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop artifact Download or upload Artifacts to the CAS Options ``` -h, --help help for artifact ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop artifact download download an artifact ``` chainloop artifact download [flags] ``` Options ``` -d, --digest string digest of the file to download -h, --help help for download --output file The file to write a single asset to (use "-" to write to standard output --path string download path, default to current directory ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop artifact help Help about any command Synopsis Help provides help for any command in the application. Simply type artifact help \[path to command] for full details. ``` chainloop artifact help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop artifact upload upload an artifact ``` chainloop artifact upload [flags] ``` Options ``` -f, --file string path to file to upload -h, --help help for upload ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop attestation Craft Software Supply Chain Attestations Examples ``` Refer to https://docs.chainloop.dev/getting-started/attestation-crafting ``` Options ``` --graceful-exit exit 0 in case of error. NOTE: this flag will be removed once Chainloop reaches 1.0 -h, --help help for attestation --local-state-path string path to store the attestation state locally, default: [tmpDir]/chainloop_attestation.tmp.json ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop attestation add add a material to the attestation ``` chainloop attestation add [flags] ``` Examples ``` Add a material to the attestation that is defined in the contract chainloop attestation add --name --value Add a material to the attestation that is not defined in the contract but you know the kind chainloop attestation add --kind --value Add a material to the attestation without specifying neither kind nor name enables automatic detection chainloop attestation add --value Add a material by also providing a URL pointing to the material. It will be downloaded to a temporary folder first chainloop attestation add --value https://example.com/sbom.json ``` Options ``` --annotation strings additional annotation in the format of key=value --attestation-id string Unique identifier of the in-progress attestation -h, --help help for add --kind string kind of the material to be recorded: ["ARTIFACT" "ASYNCAPI_SPEC" "ATTESTATION" "BLACKDUCK_SCA_JSON" "CHAINLOOP_AI_AGENT_CONFIG" "CHAINLOOP_AI_CODING_SESSION" "CHAINLOOP_PR_INFO" "CHAINLOOP_RUNNER_CONTEXT" "CONTAINER_IMAGE" "CSAF_INFORMATIONAL_ADVISORY" "CSAF_SECURITY_ADVISORY" "CSAF_SECURITY_INCIDENT_RESPONSE" "CSAF_VEX" "EVIDENCE" "GHAS_CODE_SCAN" "GHAS_DEPENDENCY_SCAN" "GHAS_SECRET_SCAN" "GITLAB_SECURITY_REPORT" "GITLEAKS_JSON" "GRAPHQL_SPEC" "HELM_CHART" "JACOCO_XML" "JUNIT_XML" "OPENAPI_SPEC" "OPENVEX" "SARIF" "SBOM_CYCLONEDX_JSON" "SBOM_SPDX_JSON" "SLSA_PROVENANCE" "STRING" "TWISTCLI_SCAN_JSON" "ZAP_DAST_ZIP"] --name string name of the material as shown in the contract --no-strict-validation skip strict schema validation for structured materials (SBOM_CYCLONEDX_JSON, OPENAPI_SPEC, ASYNCAPI_SPEC) --registry-password string registry password, ($CHAINLOOP_REGISTRY_PASSWORD) --registry-server string OCI repository server, ($CHAINLOOP_REGISTRY_SERVER) --registry-username string registry username, ($CHAINLOOP_REGISTRY_USERNAME) --value string value to be recorded ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode --graceful-exit exit 0 in case of error. NOTE: this flag will be removed once Chainloop reaches 1.0 -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) --local-state-path string path to store the attestation state locally, default: [tmpDir]/chainloop_attestation.tmp.json -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop attestation help Help about any command Synopsis Help provides help for any command in the application. Simply type attestation help \[path to command] for full details. ``` chainloop attestation help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode --graceful-exit exit 0 in case of error. NOTE: this flag will be removed once Chainloop reaches 1.0 -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) --local-state-path string path to store the attestation state locally, default: [tmpDir]/chainloop_attestation.tmp.json -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop attestation init start attestation crafting process ``` chainloop attestation init [flags] ``` Options ``` --collectors strings comma-separated list of additional collectors to enable (e.g. aiconfig) --contract string name of an existing contract or the path/URL to a contract file, to attach it to the auto-created workflow (it doesn't update an existing one) --contract-revision int revision of the contract to retrieve, "latest" by default --dry-run do not record attestation in the control plane, useful for development --existing-version return an error if the version doesn't exist in the project -h, --help help for init --latest-version use the latest existing project version instead of specifying one --project string name of the project of this workflow --release promote the provided version as a release --remote-state Store the attestation state remotely -f, --replace replace any existing in-progress attestation --version string project version, i.e 0.1.0 --workflow string name of the workflow to run the attestation ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode --graceful-exit exit 0 in case of error. NOTE: this flag will be removed once Chainloop reaches 1.0 -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) --local-state-path string path to store the attestation state locally, default: [tmpDir]/chainloop_attestation.tmp.json -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop attestation push generate and push the attestation to the control plane ``` chainloop attestation push [flags] ``` Examples ``` chainloop attestation push --key | --token [chainloop-token] --annotation key=value,key2=val2 sign the resulting attestation using a cosign key present in the filesystem and stdin for the passphrase NOTE that the --token flag can be replaced by having the CHAINLOOP_TOKEN env variable chainloop attestation push --key cosign.key --token [chainloop-token] or retrieve the key from an environment variable containing the private key chainloop attestation push --key env://[ENV_VAR] The passphrase can be retrieved from a well-known environment variable export CHAINLOOP_SIGNING_PASSWORD="my cosign key passphrase" chainloop attestation push --key cosign.key You can provide values for the annotations that have previously defined in the contract for example chainloop attestation push --annotation key=value --annotation key2=value2 Or alternatively chainloop attestation push --annotation key=value,key2=value2 ``` Options ``` --annotation strings additional annotation in the format of key=value --attestation-id string Unique identifier of the in-progress attestation --bundle string output a Sigstore bundle to the provided path --deactivate-ci-report deactivate automatic attestation report to CI/CD platform --exception-bypass-policy-check do not fail this command on policy violations enforcement -h, --help help for push -k, --key string reference (path or env variable name) to the cosign or KMS key that will be used to sign the attestation --signserver-ca-path string custom CA to be used for SignServer TLS connection --signserver-client-cert string path to client certificate in PEM format for authenticated SignServer TLS connection --signserver-client-pass string certificate passphrase for authenticated SignServer TLS connection ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode --graceful-exit exit 0 in case of error. NOTE: this flag will be removed once Chainloop reaches 1.0 -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) --local-state-path string path to store the attestation state locally, default: [tmpDir]/chainloop_attestation.tmp.json -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop attestation reset mark current attestation process as canceled or failed ``` chainloop attestation reset [flags] ``` Options ``` --attestation-id string Unique identifier of the in-progress attestation -h, --help help for reset --reason string reset reason --trigger string trigger for the reset, valid options are "failure" and "cancellation" (default "failure") ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode --graceful-exit exit 0 in case of error. NOTE: this flag will be removed once Chainloop reaches 1.0 -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) --local-state-path string path to store the attestation state locally, default: [tmpDir]/chainloop_attestation.tmp.json -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop attestation status check the status of the current attestation process ``` chainloop attestation status [flags] ``` Options ``` --attestation-id string Unique identifier of the in-progress attestation --full full report including current recorded values -h, --help help for status ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode --graceful-exit exit 0 in case of error. NOTE: this flag will be removed once Chainloop reaches 1.0 -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) --local-state-path string path to store the attestation state locally, default: [tmpDir]/chainloop_attestation.tmp.json -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop attestation verify verify an attestation Synopsis Verify an attestation by validating its validation material against the configured trusted root ``` chainloop attestation verify file-or-url ``` Examples ``` verify local attestation chainloop attestation verify --bundle attestation.json verify an attestation stored in an https endpoint chainloop attestation verify -b https://myrepository/attestation.json ``` Options ``` -b, --bundle string bundle path or URL -h, --help help for verify ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode --graceful-exit exit 0 in case of error. NOTE: this flag will be removed once Chainloop reaches 1.0 -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) --local-state-path string path to store the attestation state locally, default: [tmpDir]/chainloop_attestation.tmp.json -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop auth Authenticate with the Control Plane Options ``` -h, --help help for auth ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop auth delete-account delete your account ``` chainloop auth delete-account [flags] ``` Options ``` -h, --help help for delete-account ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop auth help Help about any command Synopsis Help provides help for any command in the application. Simply type auth help \[path to command] for full details. ``` chainloop auth help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop auth login authenticate the CLI with the Control Plane ``` chainloop auth login [flags] ``` Options ``` -h, --help help for login --skip-browser perform a headless login process without opening a browser ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop cas-backend Operations on Artifact CAS backends Options ``` -h, --help help for cas-backend ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop cas-backend add Add a new Artifact CAS backend Options ``` --default set the backend as default in your organization --description string descriptive information for this registration --fallback set the backend as fallback in your organization -h, --help help for add --max-bytes string Maximum size for each blob stored in this backend (e.g., 100MB, 1GB) --name string CAS backend name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop cas-backend add aws-s3 Register a AWS S3 storage bucket ``` chainloop cas-backend add aws-s3 [flags] ``` Options ``` --access-key-id string AWS Access Key ID --bucket string S3 bucket name --endpoint string Custom Endpoint URL for other S3 compatible backends i.e MinIO -h, --help help for aws-s3 --region string AWS region for the bucket --secret-access-key string AWS Secret Access Key ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode --default set the backend as default in your organization --description string descriptive information for this registration --fallback set the backend as fallback in your organization -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) --max-bytes string Maximum size for each blob stored in this backend (e.g., 100MB, 1GB) --name string CAS backend name -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop cas-backend add azure-blob Register a Azure Blob Storage CAS Backend ``` chainloop cas-backend add azure-blob [flags] ``` Options ``` --client-id string Service Principal Client ID --client-secret string Service Principal Client Secret --container string Storage Container Name (default "chainloop") --endpoint string Custom Azure Blob endpoint suffix (e.g., blob.core.usgovcloudapi.net), if not provided, the public Azure cloud endpoint will be used. -h, --help help for azure-blob --storage-account string Storage Account Name --tenant string Active Directory Tenant ID ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode --default set the backend as default in your organization --description string descriptive information for this registration --fallback set the backend as fallback in your organization -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) --max-bytes string Maximum size for each blob stored in this backend (e.g., 100MB, 1GB) --name string CAS backend name -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop cas-backend add help Help about any command Synopsis Help provides help for any command in the application. Simply type add help \[path to command] for full details. ``` chainloop cas-backend add help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode --default set the backend as default in your organization --description string descriptive information for this registration --fallback set the backend as fallback in your organization -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) --max-bytes string Maximum size for each blob stored in this backend (e.g., 100MB, 1GB) --name string CAS backend name -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop cas-backend add oci Register a OCI CAS Backend ``` chainloop cas-backend add oci [flags] ``` Options ``` -h, --help help for oci -p, --password string registry password --repo string FQDN repository name, including path -u, --username string registry username ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode --default set the backend as default in your organization --description string descriptive information for this registration --fallback set the backend as fallback in your organization -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) --max-bytes string Maximum size for each blob stored in this backend (e.g., 100MB, 1GB) --name string CAS backend name -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop cas-backend delete Delete a CAS Backend from your organization ``` chainloop cas-backend delete [flags] ``` Options ``` -h, --help help for delete --name string CAS Backend name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop cas-backend help Help about any command Synopsis Help provides help for any command in the application. Simply type cas-backend help \[path to command] for full details. ``` chainloop cas-backend help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop cas-backend list List CAS Backends from your organization ``` chainloop cas-backend list [flags] ``` Options ``` --full show the full output -h, --help help for list ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop cas-backend update Update a CAS backend description, credentials, default status, fallback status, or max bytes Options ``` --default set the backend as default in your organization --description string descriptive information for this registration --fallback set the backend as fallback in your organization -h, --help help for update --max-bytes string Maximum size for each blob stored in this backend (e.g., 100MB, 1GB). Note: not supported for inline backends. --name string CAS backend name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop cas-backend update aws-s3 Update a AWS S3 CAS Backend description, credentials, default status, or max bytes ``` chainloop cas-backend update aws-s3 [flags] ``` Options ``` --access-key-id string AWS Access Key ID -h, --help help for aws-s3 --name string CAS Backend name --region string AWS region for the bucket --secret-access-key string AWS Secret Access Key ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode --default set the backend as default in your organization --description string descriptive information for this registration --fallback set the backend as fallback in your organization -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) --max-bytes string Maximum size for each blob stored in this backend (e.g., 100MB, 1GB). Note: not supported for inline backends. -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop cas-backend update azure-blob Update a AzureBlob CAS Backend description, credentials, default status, or max bytes ``` chainloop cas-backend update azure-blob [flags] ``` Options ``` --client-id string Service Principal Client ID --client-secret string Service Principal Client Secret -h, --help help for azure-blob --name string CAS Backend name --tenant string Active Directory Tenant ID ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode --default set the backend as default in your organization --description string descriptive information for this registration --fallback set the backend as fallback in your organization -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) --max-bytes string Maximum size for each blob stored in this backend (e.g., 100MB, 1GB). Note: not supported for inline backends. -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop cas-backend update help Help about any command Synopsis Help provides help for any command in the application. Simply type update help \[path to command] for full details. ``` chainloop cas-backend update help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode --default set the backend as default in your organization --description string descriptive information for this registration --fallback set the backend as fallback in your organization -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) --max-bytes string Maximum size for each blob stored in this backend (e.g., 100MB, 1GB). Note: not supported for inline backends. --name string CAS backend name -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop cas-backend update inline Update the Inline CAS Backend description, default status, or fallback status ``` chainloop cas-backend update inline [flags] ``` Options ``` -h, --help help for inline --name string CAS Backend name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode --default set the backend as default in your organization --description string descriptive information for this registration --fallback set the backend as fallback in your organization -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) --max-bytes string Maximum size for each blob stored in this backend (e.g., 100MB, 1GB). Note: not supported for inline backends. -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop cas-backend update oci Update a OCI CAS Backend description, credentials, default status, or max bytes ``` chainloop cas-backend update oci [flags] ``` Options ``` -h, --help help for oci --name string CAS Backend name -p, --password string registry password -u, --username string registry username ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode --default set the backend as default in your organization --description string descriptive information for this registration --fallback set the backend as fallback in your organization -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) --max-bytes string Maximum size for each blob stored in this backend (e.g., 100MB, 1GB). Note: not supported for inline backends. -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop config Configure this client Options ``` -h, --help help for config ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop config help Help about any command Synopsis Help provides help for any command in the application. Simply type config help \[path to command] for full details. ``` chainloop config help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop config plugin Manage plugins (preview) Synopsis Manage Chainloop CLI plugins (preview) Options ``` -h, --help help for plugin ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop config plugin describe Show detailed information about a plugin ``` chainloop config plugin describe [flags] ``` Options ``` -h, --help help for describe --name string Name of the plugin to describe (required) ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop config plugin help Help about any command Synopsis Help provides help for any command in the application. Simply type plugin help \[path to command] for full details. ``` chainloop config plugin help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop config plugin install Install a plugin Synopsis Install a plugin to the plugins directory from a specified URL or local file. ``` chainloop config plugin install [flags] ``` Options ``` -f, --file string URL or path to the plugin to install -h, --help help for install ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop config plugin list List installed plugins ``` chainloop config plugin list [flags] ``` Options ``` -h, --help help for list ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop config reset Reset the CLI configuration ``` chainloop config reset [flags] ``` Options ``` -h, --help help for reset ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop config save Persist the current settings to the config file ``` chainloop config save [flags] ``` Examples ``` chainloop config save --control-plane localhost:1234 --artifact-cas localhost:1235 ``` Options ``` -h, --help help for save ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop config view View the current CLI configuration ``` chainloop config view [flags] ``` Options ``` -h, --help help for view ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop deployment (Preview) Deployment record operations Options ``` -h, --help help for deployment ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop deployment help Help about any command Synopsis Help provides help for any command in the application. Simply type deployment help \[path to command] for full details. ``` chainloop deployment help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop deployment list List deployment records ``` chainloop deployment list [flags] ``` Examples ``` List deployment records (shows latest per slot by default) chainloop deployment list Filter by environment chainloop deployment list --env prod-k8s Filter by project and version chainloop deployment list --project my-project --project-version v1.0.0 Filter by status chainloop deployment list --status deployed Show full history for a specific slot chainloop deployment list --env prod-k8s --name myapp-web --history Show full history for all slots chainloop deployment list --history ``` Options ``` --env string filter by environment name -h, --help help for list --history show full history instead of only the latest record per slot --limit int32 number of items per page (default 50) --logical-env string filter by logical environment name --name string filter by deployment name (slot identifier) --page int32 page number (starts at 1) (default 1) --project string filter by project name --project-version string filter by project version (requires --project) --status string filter by deployment status (deployed, decommissioned, superseded) ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop deployment record Record a deployment ``` chainloop deployment record [flags] ``` Examples ``` Record a container image deployment using an OCI reference (resolves digest automatically) chainloop deployment record --env prod-k8s --oci-ref ghcr.io/chainloop-dev/platform/backend:v1.31.0 --kind CONTAINER_IMAGE --status deployed --deployment-name backend --logical-env production Record using a pre-computed digest (no image reference needed) chainloop deployment record --env prod-k8s --digest sha256:abc123 --kind CONTAINER_IMAGE --status deployed --deployment-name myapp-web --logical-env staging Record with explicit registry credentials chainloop deployment record --env prod-k8s --oci-ref private.registry.io/myapp:latest --kind CONTAINER_IMAGE --status deployed --deployment-name myapp --logical-env production --registry-server private.registry.io --registry-username user --registry-password pass ``` Options ``` --deployment-name string stable slot identifier within an environment --digest string artifact digest (mutually exclusive with --oci-ref) --env string environment name -h, --help help for record --kind string artifact kind (CONTAINER_IMAGE, HELM_CHART) --logical-env string logical environment name (e.g. staging, production) --oci-ref string OCI image reference to resolve digest from (e.g. ghcr.io/org/repo:tag) --registry-password string registry password ($CHAINLOOP_REGISTRY_PASSWORD) --registry-server string OCI registry server ($CHAINLOOP_REGISTRY_SERVER) --registry-username string registry username ($CHAINLOOP_REGISTRY_USERNAME) --status string deployment status (deployed, decommissioned, superseded) ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop discover (Preview) inspect pieces of evidence or artifacts stored through Chainloop ``` chainloop discover [flags] ``` Options ``` -d, --digest string hash of the attestation, piece of evidence or artifact, i.e sha256:deadbeef -h, --help help for discover -k, --kind string optional kind of the referrer, used to disambiguate between multiple referrers with the same digest --limit int number of items to show (default 20) --next string cursor to load the next page --public discover from public shared index instead of your organizations' ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop environment (Preview) Manage environments Options ``` -h, --help help for environment ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop environment create Create a new environment ``` chainloop environment create [flags] ``` Examples ``` Create a Kubernetes environment chainloop environment create --name prod-k8s --type kubernetes Create an environment with description chainloop environment create --name staging-ecs --type ecs --description "Staging ECS cluster" ``` Options ``` --description string environment description -h, --help help for create --name string environment name (DNS-1123 format: lowercase, numbers, hyphens) --type string environment type (kubernetes, ecs, server, lambda, custom) ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop environment delete Delete an environment ``` chainloop environment delete [flags] ``` Examples ``` Delete an environment (with confirmation prompt) chainloop environment delete --name prod-k8s Delete without confirmation chainloop environment delete --name prod-k8s --yes ``` Options ``` -h, --help help for delete --name string environment name -y, --yes skip confirmation prompt ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN ``` ### chainloop environment describe Describe an environment ``` chainloop environment describe [flags] ``` Examples ``` Describe an environment by name chainloop environment describe --name prod-k8s ``` Options ``` -h, --help help for describe --name string environment name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop environment help Help about any command Synopsis Help provides help for any command in the application. Simply type environment help \[path to command] for full details. ``` chainloop environment help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop environment list List environments ``` chainloop environment list [flags] ``` Examples ``` List all environments chainloop environment list Filter by query chainloop environment list --query prod ``` Options ``` -h, --help help for list --limit int32 number of items per page (default 50) --page int32 page number (starts at 1) (default 1) --query string search across name and description ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop environment logical Logical environment operations Options ``` -h, --help help for logical ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop environment logical create Create a logical environment ``` chainloop environment logical create [flags] ``` Examples ``` Create a logical environment chainloop environment logical create --name QA --description "Quality assurance environments" ``` Options ``` --description string logical environment description -h, --help help for create --name string logical environment name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop environment logical delete Delete a logical environment ``` chainloop environment logical delete [flags] ``` Examples ``` Delete a logical environment (with confirmation prompt) chainloop environment logical delete --name QA Delete without confirmation chainloop environment logical delete --name QA --yes ``` Options ``` -h, --help help for delete --name string logical environment name -y, --yes skip confirmation prompt ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN ``` #### chainloop environment logical describe Describe a logical environment ``` chainloop environment logical describe [flags] ``` Examples ``` Describe a logical environment by name chainloop environment logical describe --name Production ``` Options ``` -h, --help help for describe --name string logical environment name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop environment logical help Help about any command Synopsis Help provides help for any command in the application. Simply type logical help \[path to command] for full details. ``` chainloop environment logical help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop environment logical list List logical environments ``` chainloop environment logical list [flags] ``` Examples ``` List all logical environments chainloop environment logical list Search by query chainloop environment logical list --query prod ``` Options ``` -h, --help help for list --limit int32 number of items per page (default 50) --page int32 page number (starts at 1) (default 1) --query string search across name and description ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop environment logical update Update a logical environment ``` chainloop environment logical update [flags] ``` Examples ``` Update logical environment description chainloop environment logical update --name Production --description "Production deployment environments" ``` Options ``` --description string new description -h, --help help for update --name string logical environment name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop environment update Update an environment ``` chainloop environment update [flags] ``` Examples ``` Update environment description chainloop environment update --name prod-k8s --description "Production Kubernetes cluster" Change environment type chainloop environment update --name prod-k8s --type ecs ``` Options ``` --description string new description -h, --help help for update --name string environment name --type string new environment type (kubernetes, ecs, server, lambda, custom) ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop evidence Manage evidence Synopsis Commands for interacting with pieces of evidence in your organization Options ``` -h, --help help for evidence ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop evidence help Help about any command Synopsis Help provides help for any command in the application. Simply type evidence help \[path to command] for full details. ``` chainloop evidence help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop evidence list List evidence Synopsis List the pieces of evidence registered in your organization ``` chainloop evidence list [flags] ``` Examples ``` List all evidence chainloop evidence list Filter by project chainloop evidence list --project myapp Filter by project version chainloop evidence list --project myapp --project-version v1.0.0 Filter by product chainloop evidence list --product-id --product-version-id Filter by kind (multiple) chainloop evidence list --kind SBOM_CYCLONEDX_JSON --kind SARIF Search by name, subject, or digest chainloop evidence list --search sha256:abc123... Pagination chainloop evidence list --project myapp --limit 20 chainloop evidence list --project myapp --limit 20 --next MjAy... JSON output chainloop evidence list --project myapp --output json ``` Options ``` -h, --help help for list --hide-attestation exclude attestation evidence from results --kind strings evidence kind (repeatable, e.g., SBOM_CYCLONEDX_JSON, SARIF) --latest show only latest evidence (requires project or product filter) --limit int32 number of items to show (1-200) (default 50) --next string cursor to load the next page --product-id string product ID (requires --product-version-id) --product-version-id string product version ID (requires --product-id) --project string project name --project-version string project version name (requires --project) --search string search by evidence name, subject name, or digest --workflow strings workflow name (repeatable) ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop framework Manage compliance frameworks Options ``` -h, --help help for framework ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop framework delete Delete a framework ``` chainloop framework delete [flags] ``` Examples ``` Delete a framework (with confirmation prompt) chainloop framework delete --name my-framework Delete a framework without confirmation chainloop framework delete --name my-framework --yes ``` Options ``` -h, --help help for delete --name string framework name -y, --yes skip confirmation prompt ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN ``` ### chainloop framework describe Describe a framework ``` chainloop framework describe [flags] ``` Examples ``` Describe a framework chainloop framework describe --name my-framework Download the framework schema chainloop framework describe --name my-framework --output schema ``` Options ``` -h, --help help for describe --name string framework name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop framework help Help about any command Synopsis Help provides help for any command in the application. Simply type framework help \[path to command] for full details. ``` chainloop framework help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop framework list List frameworks ``` chainloop framework list [flags] ``` Examples ``` List all frameworks chainloop framework list List frameworks with pagination chainloop framework list --page 2 --limit 10 ``` Options ``` -h, --help help for list --limit int32 number of items per page (default 50) --page int32 page number (starts at 1) (default 1) ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop gather-runner-context Gather runner context data from a given provider Synopsis Gather runner context data from a given provider (GitHub or GitLab). This command retrieves repository configuration data including branch protection rules, rulesets, and contributor information from the specified provider. The command supports auto-detection of configuration from environment variables: * Provider: Auto-detected from GITHUB\_TOKEN/GITHUB\_REPOSITORY (GitHub) or CI\_PROJECT\_ID/CI\_PROJECT\_NAMESPACE (GitLab) * Organization: Auto-detected from GITHUB\_REPOSITORY or CI\_PROJECT\_NAMESPACE * Repository: Auto-detected from GITHUB\_REPOSITORY or CI\_PROJECT\_ID * Token: Auto-detected from GITLAB\_TOKEN (GitLab only) ``` chainloop gather-runner-context [flags] ``` Examples ``` Using flags chainloop gather-runner-context --runner-provider github --runner-token --runner-org myorg --runner-repo myrepo Using environment variables (GitHub Actions) export GITHUB_TOKEN= export GITHUB_REPOSITORY=myorg/myrepo chainloop gather-runner-context Using environment variables (GitLab CI) export GITLAB_TOKEN= export CI_PROJECT_NAMESPACE=myorg export CI_PROJECT_ID=12345 chainloop gather-runner-context ``` Options ``` --branches string Comma-separated list of branch name patterns to fetch (e.g., main,dev*,feature/*). Supports fnmatch patterns where * matches any characters except /, ** matches across directories, ? matches single character, and [abc] matches character classes. If not specified, all branches are fetched. --fetch-contributors Fetch contributor information from the repository (contributors, members, and 2FA status) -h, --help help for gather-runner-context --insecure-skip-tls-verify Skip TLS certificate verification for API requests (useful for self-signed certificates) --max-tags int Maximum number of tags to include (most recent first). 0 means no limit. (default 15) --output-file string Output file path for the runner context data (JSON format) (default "runner-context.json") --runner-api-url string Provider API URL --runner-org string The owner of the repository (e.g., chainloop-dev) --runner-provider string Provider name (e.g., github, gitlab) --runner-repo string The repository name for which the context data is gathered (e.g., chainloop) --runner-token string Provider access token with read rights to the given repository --tags string Comma-separated list of tag name patterns to fetch (e.g., v*,release-*). Supports fnmatch patterns. If not specified, all tags are fetched. ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop integration Third party integrations Options ``` -h, --help help for integration ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop integration attached Integrations attached to workflows Options ``` -h, --help help for attached ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop integration attached add Attach an existing registered integration to a workflow ``` chainloop integration attached add [flags] ``` Examples ``` chainloop integration attached add --workflow deadbeef --project my-project --integration beefdoingwell --opt projectName=MyProject --opt projectVersion=1.0.0 Only send SBOMs to dependency track when the annotations in the attestation or material match the filter in an AND operation. Note: material annotations take precedence over attestation ones. chainloop integration attached add --workflow deadbeef --project my-project --integration dependency-track --opt projectName=MyProject --opt filter="environment=prod,team=security" ``` Options ``` -h, --help help for add --integration string Name of the integration already registered in this organization --opt stringArray integration attachment arguments --project string name of the project the workflow belongs to --workflow string name of the workflow to attach this integration ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop integration attached delete Detach an integration that's attached to a workflow ``` chainloop integration attached delete [flags] ``` Options ``` -h, --help help for delete --id string ID of the existing attachment ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop integration attached help Help about any command Synopsis Help provides help for any command in the application. Simply type attached help \[path to command] for full details. ``` chainloop integration attached help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop integration attached list List integrations attached to workflows ``` chainloop integration attached list [flags] ``` Options ``` -h, --help help for list --project string project name --workflow string workflow name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop integration available Integrations available in the platform ready to be registered Options ``` -h, --help help for available ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop integration available describe Describe integration ``` chainloop integration available describe [flags] ``` Options ``` --full show the full output including JSON schemas -h, --help help for describe --name string integration name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop integration available help Help about any command Synopsis Help provides help for any command in the application. Simply type available help \[path to command] for full details. ``` chainloop integration available help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop integration available list List available integrations ``` chainloop integration available list [flags] ``` Options ``` -h, --help help for list ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop integration help Help about any command Synopsis Help provides help for any command in the application. Simply type integration help \[path to command] for full details. ``` chainloop integration help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop integration registered Integrations registered and configured in your Organization Options ``` -h, --help help for registered ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop integration registered add Register a new instance of an integration ``` chainloop integration registered add INTEGRATION_ID --name [registration-name] --options key=value,key=value [flags] ``` Examples ``` chainloop integration registered add dependencytrack --name send-to-prod --opt instance=https://deptrack.company.com,apiKey=1234567890 --opt username=chainloop ``` Options ``` --description string integration registration description -h, --help help for add --name string unique registration name, i.e my-registration, sboms-to-prod, etc. --opt stringArray integration arguments ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop integration registered delete De-register an integration ``` chainloop integration registered delete [flags] ``` Options ``` -h, --help help for delete --id string integration registration ID ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop integration registered help Help about any command Synopsis Help provides help for any command in the application. Simply type registered help \[path to command] for full details. ``` chainloop integration registered help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop integration registered list List registered integrations ``` chainloop integration registered list [flags] ``` Options ``` -h, --help help for list ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop organization Organizations management Options ``` -h, --help help for organization ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop organization api-token API token management Synopsis Manage API tokens to authenticate with the Chainloop API or perform attestations. Options ``` -h, --help help for api-token ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop organization api-token create Create an API token ``` chainloop organization api-token create [flags] ``` Options ``` --description string API token description --expiration duration optional API token expiration, in hours i.e 1h, 24h, 178h (week), ... -h, --help help for create --name string token name --project string project name used to scope the token, if not set the token will be created at the organization level ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string output format, valid options are table, json, token (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop organization api-token help Help about any command Synopsis Help provides help for any command in the application. Simply type api-token help \[path to command] for full details. ``` chainloop organization api-token help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop organization api-token list List API tokens in this organization ``` chainloop organization api-token list [flags] ``` Options ``` -h, --help help for list -p, --project string filter by project name -s, --scope string filter by scope, available scopes: [project global] --status string filter by token status, available values: [active revoked all] ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop organization api-token revoke revoke API token ``` chainloop organization api-token revoke [flags] ``` Options ``` -h, --help help for revoke --id string API token ID ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop organization create Create an organization ``` chainloop organization create [flags] ``` Options ``` -h, --help help for create --name string organization name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop organization delete Delete an organization Synopsis Delete an organization. Only organization owners can delete an organization. ``` chainloop organization delete [flags] ``` Options ``` -h, --help help for delete --name string organization name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop organization describe Describe the current organization ``` chainloop organization describe [flags] ``` Options ``` -h, --help help for describe ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop organization help Help about any command Synopsis Help provides help for any command in the application. Simply type organization help \[path to command] for full details. ``` chainloop organization help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop organization leave leave an organization ``` chainloop organization leave [flags] ``` Options ``` -h, --help help for leave --name string organization name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop organization list List the organizations this user has access to ``` chainloop organization list [flags] ``` Options ``` -h, --help help for list ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop organization member Organization members management Options ``` -h, --help help for member ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop organization member delete Remove a member from the current organization ``` chainloop organization member delete [flags] ``` Options ``` -h, --help help for delete --id string Membership ID ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop organization member help Help about any command Synopsis Help provides help for any command in the application. Simply type member help \[path to command] for full details. ``` chainloop organization member help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop organization member invitation User Invitations Options ``` -h, --help help for invitation ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ##### chainloop organization member invitation create Invite a User to an Organization ``` chainloop organization member invitation create [flags] ``` Options ``` -h, --help help for create --receiver string Email of the user to invite --role string Role of the user in the organization, available admin, owner, viewer (default "viewer") ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ##### chainloop organization member invitation help Help about any command Synopsis Help provides help for any command in the application. Simply type invitation help \[path to command] for full details. ``` chainloop organization member invitation help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ##### chainloop organization member invitation list List sent invitations ``` chainloop organization member invitation list [flags] ``` Options ``` -h, --help help for list ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ##### chainloop organization member invitation revoke Revoke a pending invitation ``` chainloop organization member invitation revoke [flags] ``` Options ``` -h, --help help for revoke --id string Invitation ID ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop organization member list List the members of the current organization ``` chainloop organization member list [flags] ``` Examples ``` Let the default pagination apply chainloop organization member list Specify the page and page size chainloop organization member list --page 2 --limit 10 Filter by name chainloop organization member list --name alice Filter by email chainloop organization member list --email alice@example.com Filter by role chainloop organization member list --role admin Combine filters and pagination chainloop organization member list --role admin --page 2 --limit 5 ``` Options ``` --email string Filter by member email -h, --help help for list --limit int number of items to show (default 50) --name string Filter by member name or last name --page int page number (default 1) --role string Role of the user in the organization, available admin, owner, viewer ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop organization member update Update a member of the organization ``` chainloop organization member update [flags] ``` Options ``` -h, --help help for update --id string Membership ID --role string Role of the user in the organization, available admin, owner, viewer (default "viewer") ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop organization set Set the current organization to be used by this CLI ``` chainloop organization set [flags] ``` Examples ``` Set the current organization to be used by this CLI $ chainloop org set --name my-org Optionally set the organization as the default one for all clients by storing the preference server-side $ chainloop org set --name my-org --default ``` Options ``` --default set this organization as the default one for all clients -h, --help help for set --name string organization name to make the switch ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop organization update Update an existing organization ``` chainloop organization update [flags] ``` Options ``` --api-token-max-days-inactive string maximum days of inactivity before API tokens are auto-revoked (e.g. '90', '0' to disable) --block set the default policy violation blocking strategy --disable-requirements-auto-matching disable requirements auto-matching --enable-ai-agent-collector enable automatic AI agent config collection during attestation init --force-review force all manual evidence and overrides to pass through review workflow --frameworks-built-in enable built-in compliance frameworks --frameworks-preview enable preview compliance frameworks -h, --help help for update --name string organization name --policies-allowed-hostnames strings set the allowed hostnames for the policy engine --prevent-implicit-workflow-creation prevent workflows and projects from being created implicitly during attestation init --restrict-contract-creation restrict contract creation (org-level and project-level) to only organization admins (owner/admin roles) ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop policy Craft chainloop policies Options ``` -h, --help help for policy ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop policy create Create a new policy ``` chainloop policy create [flags] ``` Examples ``` Create a policy chainloop policy create --file my-policy.yaml ``` Options ``` -f, --file string policy file path (YAML or JSON) -h, --help help for create ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop policy delete Delete a policy ``` chainloop policy delete [flags] ``` Examples ``` Delete a policy chainloop policy delete --name my-policy ``` Options ``` -h, --help help for delete --name string policy name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop policy describe Describe a policy ``` chainloop policy describe [flags] ``` Examples ``` Describe a policy by name chainloop policy describe --name my-policy Describe a specific policy version by digest chainloop policy describe --name my-policy --digest sha256:abc123 Describe a policy from a specific organization chainloop policy describe --name my-policy --organization myorg ``` Options ``` --digest string specific policy version digest -h, --help help for describe --name string policy name --organization string organization name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop policy develop Tools for policy development Synopsis A set of tools to facilitate policy development. Refer to [https://docs.chainloop.dev/guides/custom-policies](https://docs.chainloop.dev/guides/custom-policies) for more information. Options ``` -h, --help help for develop ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop policy develop eval Evaluate policy against provided material Synopsis Perform a full evaluation of the policy against the provided material type. The command checks if there is a path in the policy for the specified kind and evaluates the policy against the provided material or attestation. ``` chainloop policy develop eval [flags] ``` Examples ``` Evaluate policy against a material file chainloop policy develop eval --policy policy.yaml --material sbom.json --kind SBOM_CYCLONEDX_JSON --annotation key1=value1,key2=value2 --input key3=value3 ``` Options ``` --allowed-hostnames strings Additional hostnames allowed for http.send requests in policies --annotation strings Key-value pairs of material annotations (key=value) -h, --help help for eval --input stringArray Key-value pairs of policy inputs (key=value) --kind string Kind of the material: ["ARTIFACT" "ASYNCAPI_SPEC" "ATTESTATION" "BLACKDUCK_SCA_JSON" "CHAINLOOP_AI_AGENT_CONFIG" "CHAINLOOP_AI_CODING_SESSION" "CHAINLOOP_PR_INFO" "CHAINLOOP_RUNNER_CONTEXT" "CONTAINER_IMAGE" "CSAF_INFORMATIONAL_ADVISORY" "CSAF_SECURITY_ADVISORY" "CSAF_SECURITY_INCIDENT_RESPONSE" "CSAF_VEX" "EVIDENCE" "GHAS_CODE_SCAN" "GHAS_DEPENDENCY_SCAN" "GHAS_SECRET_SCAN" "GITLAB_SECURITY_REPORT" "GITLEAKS_JSON" "GRAPHQL_SPEC" "HELM_CHART" "JACOCO_XML" "JUNIT_XML" "OPENAPI_SPEC" "OPENVEX" "SARIF" "SBOM_CYCLONEDX_JSON" "SBOM_SPDX_JSON" "SLSA_PROVENANCE" "STRING" "TWISTCLI_SCAN_JSON" "ZAP_DAST_ZIP"] --material string Path to material or attestation file -p, --policy string Policy reference (./my-policy.yaml, https://my-domain.com/my-policy.yaml, chainloop://my-stored-policy) (default "policy.yaml") --project string Project name to use as engine context for chainloop.* built-ins --project-version string Project version to use as engine context for chainloop.* built-ins ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop policy develop help Help about any command Synopsis Help provides help for any command in the application. Simply type develop help \[path to command] for full details. ``` chainloop policy develop help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop policy develop init Initialize a new policy Synopsis Initialize a new policy by creating template policy files in the specified directory. By default, it creates chainloop-policy.yaml and chainloop-policy.rego files. ``` chainloop policy develop init [flags] ``` Examples ``` Initialize in current directory with separate files chainloop policy develop init Initialize in specific directory with embedded format and policy name chainloop policy develop init --directory ./policies --embedded --name mypolicy ``` Options ``` --description string description of the policy --directory string directory for policy --embedded initialize an embedded policy (single YAML file) -f, --force overwrite existing files -h, --help help for init --name string name of the policy ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop policy develop lint Lint chainloop policy structure and content Synopsis Performs comprehensive validation of: * \*.yaml files (schema validation) * \*.rego (formatting, linting, structure) ``` chainloop policy develop lint [flags] ``` Options ``` --format Auto-format standalone policy rego files with opa fmt (embedded policies not supported) -h, --help help for lint -p, --policy string Path to policy file (default "policy.yaml") --regal-config string Path to custom regal config (Default: https://github.com/chainloop-dev/chainloop/tree/main/app/cli/internal/policydevel/.regal.yaml) ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop policy help Help about any command Synopsis Help provides help for any command in the application. Simply type policy help \[path to command] for full details. ``` chainloop policy help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop policy list List policies ``` chainloop policy list [flags] ``` Options ``` --builtin Show only builtin policies --custom Show only custom policies -h, --help help for list ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop policy update Update an existing policy ``` chainloop policy update [flags] ``` Examples ``` Update a policy chainloop policy update --file my-policy.yaml ``` Options ``` -f, --file string policy file path -h, --help help for update ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop policy-group Policy group operations Options ``` -h, --help help for policy-group ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop policy-group create Create a new policy group ``` chainloop policy-group create [flags] ``` Examples ``` Create a policy group from file chainloop policy-group create --file my-policy-group.yaml ``` Options ``` -f, --file string policy group file path -h, --help help for create ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop policy-group delete Delete a policy group ``` chainloop policy-group delete [flags] ``` Examples ``` Delete a policy group chainloop policy-group delete --name my-policy-group ``` Options ``` -h, --help help for delete --name string policy group name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop policy-group describe Describe a policy group ``` chainloop policy-group describe [flags] ``` Examples ``` Describe a policy group by name chainloop policy-group describe --name my-policy-group Describe a specific policy group version by digest chainloop policy-group describe --name my-policy-group --digest sha256:abc123 Describe a policy group from a specific organization chainloop policy-group describe --name my-policy-group --organization myorg ``` Options ``` --digest string specific policy group version digest -h, --help help for describe --name string policy group name --organization string organization name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop policy-group help Help about any command Synopsis Help provides help for any command in the application. Simply type policy-group help \[path to command] for full details. ``` chainloop policy-group help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop policy-group list List policy groups ``` chainloop policy-group list [flags] ``` Examples ``` List all policy groups chainloop policy-group list ``` Options ``` --builtin Show only builtin policy groups --custom Show only custom policy groups -h, --help help for list ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop policy-group update Update an existing policy group ``` chainloop policy-group update [flags] ``` Examples ``` Update a policy group from file chainloop policy-group update --file my-policy-group.yaml ``` Options ``` -f, --file string policy group file path -h, --help help for update ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop product Product operations Options ``` -h, --help help for product ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop product create Create a new product ``` chainloop product create [flags] ``` Examples ``` Create a product chainloop product create --name my-product --description "My product description" ``` Options ``` --description string product description -h, --help help for create --name string product name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop product delete Delete a product ``` chainloop product delete [flags] ``` Examples ``` Delete a product chainloop product delete --name my-product Delete a product without confirmation chainloop product delete --name my-product --yes ``` Options ``` -h, --help help for delete --name string product name -y, --yes skip confirmation prompt ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN ``` ### chainloop product describe Describe a product ``` chainloop product describe [flags] ``` Examples ``` Describe a product chainloop product describe --name my-product ``` Options ``` -h, --help help for describe --name string product name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop product help Help about any command Synopsis Help provides help for any command in the application. Simply type product help \[path to command] for full details. ``` chainloop product help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop product list List products ``` chainloop product list [flags] ``` Examples ``` List all products chainloop product list List products with pagination chainloop product list --page 2 --limit 10 ``` Options ``` -h, --help help for list --limit int32 number of items per page (default 50) --name string filter by product name --page int32 page number (starts at 1) (default 1) ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop product update Update a product ``` chainloop product update [flags] ``` Examples ``` Update product description chainloop product update --name my-product --description "New description" Rename a product chainloop product update --name my-product --new-name new-product-name ``` Options ``` --description string new product description -h, --help help for update --name string product name --new-name string new product name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop product version Product version operations Options ``` -h, --help help for version ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop product version attach-framework Attach a framework to a product version ``` chainloop product version attach-framework [flags] ``` Examples ``` Attach a framework to a product version chainloop product version attach-framework --product my-product --version v1.0.0 --framework my-framework ``` Options ``` --framework string framework name -h, --help help for attach-framework --product string product name --version string product version name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop product version attach-project Attach a project to a product version ``` chainloop product version attach-project [flags] ``` Examples ``` Attach a project tracking latest version chainloop product version attach-project --product my-product --version v1.0.0 --project my-project --track-latest Attach a project with a specific version chainloop product version attach-project --product my-product --version v1.0.0 --project my-project --project-version v2.0.0 ``` Options ``` -h, --help help for attach-project --product string product name --project string project name --project-version string project version name (mutually exclusive with --track-latest) --track-latest track the latest project version (mutually exclusive with --project-version) --version string product version name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop product version create Create a new product version ``` chainloop product version create [flags] ``` Examples ``` Create a new version chainloop product version create --product my-product --name v1.0.0 Create a version with description chainloop product version create --product my-product --name v1.0.0 --description "Initial release" Clone from an existing version chainloop product version create --product my-product --name v2.0.0 --from-version v1.0.0 ``` Options ``` --description string version description --from-version string clone from existing version (by name) -h, --help help for create --name string version name --product string product name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop product version delete Delete a product version ``` chainloop product version delete [flags] ``` Examples ``` Delete a specific version chainloop product version delete --product my-product --version v1.0.0 Delete a version without confirmation chainloop product version delete --product my-product --version v1.0.0 --yes ``` Options ``` -h, --help help for delete --product string product name --version string version name -y, --yes skip confirmation prompt ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN ``` #### chainloop product version describe Describe a product version ``` chainloop product version describe [flags] ``` Examples ``` Describe a specific version chainloop product version describe --product my-product --version v1.0.0 ``` Options ``` -h, --help help for describe --product string product name --version string version name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop product version detach-framework Detach a framework from a product version ``` chainloop product version detach-framework [flags] ``` Examples ``` Detach a framework from a product version chainloop product version detach-framework --product my-product --version v1.0.0 --framework my-framework ``` Options ``` --framework string framework name -h, --help help for detach-framework --product string product name --version string product version name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop product version detach-project Detach a project from a product version ``` chainloop product version detach-project [flags] ``` Examples ``` Detach a project from a product version chainloop product version detach-project --product my-product --version v1.0.0 --project my-project ``` Options ``` -h, --help help for detach-project --product string product name --project string project name --version string product version name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop product version help Help about any command Synopsis Help provides help for any command in the application. Simply type version help \[path to command] for full details. ``` chainloop product version help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop product version list List product versions ``` chainloop product version list [flags] ``` Examples ``` List all versions for a product chainloop product version list --product my-product List with pagination chainloop product version list --product my-product --page 2 --limit 10 ``` Options ``` -h, --help help for list --limit int32 number of items per page (default 50) --page int32 page number (starts at 1) (default 1) --product string product name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop product version update Update a product version ``` chainloop product version update [flags] ``` Examples ``` Mark a version as released chainloop product version update --product my-product --version v1.0.0 --is-released Rename a version chainloop product version update --product my-product --version v1.0.0 --new-name v1.0.1 Update description chainloop product version update --product my-product --version v1.0.0 --description "Updated description" ``` Options ``` --description string new version description -h, --help help for update --is-released mark the version as released or prerelease --new-name string new version name --product string product name --version string version name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop project Project operations Options ``` -h, --help help for project ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop project create Create a new project ``` chainloop project create [flags] ``` Examples ``` Create a project with name and description chainloop project create --name my-project --description "My project description" Create a project with just a name chainloop project create --name my-project ``` Options ``` --description string project description -h, --help help for create --name string project name (DNS-1123 format: lowercase, numbers, hyphens) ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop project delete Delete a project ``` chainloop project delete [flags] ``` Examples ``` Delete a project (with confirmation prompt) chainloop project delete --name my-project Delete a project without confirmation chainloop project delete --name my-project --yes ``` Options ``` -h, --help help for delete --name string project name -y, --yes skip confirmation prompt ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN ``` ### chainloop project describe Describe a project ``` chainloop project describe [flags] ``` Examples ``` Describe a project by name chainloop project describe --name my-project ``` Options ``` -h, --help help for describe --name string project name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop project help Help about any command Synopsis Help provides help for any command in the application. Simply type project help \[path to command] for full details. ``` chainloop project help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop project list List projects ``` chainloop project list [flags] ``` Examples ``` List all projects chainloop project list List projects with pagination chainloop project list --page 2 --limit 10 Filter by project name chainloop project list --name my-project Filter by description chainloop project list --description "production" ``` Options ``` --description string filter by description -h, --help help for list --limit int32 number of items per page (default 50) --name string filter by project name --page int32 page number (starts at 1) (default 1) ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop project update Update a project ``` chainloop project update [flags] ``` Examples ``` Update project description chainloop project update --name my-project --description "New description" ``` Options ``` --description string new project description -h, --help help for update --name string project name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop project version Project version operations Options ``` -h, --help help for version ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop project version create Create a new project version ``` chainloop project version create [flags] ``` Examples ``` Create a new prerelease version chainloop project version create --project my-project --name v1.0.0 Create a released version chainloop project version create --project my-project --name v1.0.0 --is-released ``` Options ``` -h, --help help for create --is-released mark the version as released --name string version name --project string project name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop project version delete Delete a project version ``` chainloop project version delete [flags] ``` Examples ``` Delete a specific version (with confirmation prompt) chainloop project version delete --project my-project --name v1.0.0 Delete a version without confirmation chainloop project version delete --project my-project --name v1.0.0 --yes ``` Options ``` -h, --help help for delete --name string version name --project string project name -y, --yes skip confirmation prompt ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN ``` #### chainloop project version describe Describe a project version ``` chainloop project version describe [flags] ``` Examples ``` Describe a specific version chainloop project version describe --project my-project --name v1.0.0 ``` Options ``` -h, --help help for describe --name string version name --project string project name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop project version help Help about any command Synopsis Help provides help for any command in the application. Simply type version help \[path to command] for full details. ``` chainloop project version help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop project version list List project versions ``` chainloop project version list [flags] ``` Examples ``` List all versions for a project chainloop project version list --project my-project List with pagination chainloop project version list --project my-project --page 2 --limit 10 Filter by version name chainloop project version list --project my-project --name v1 Filter by status chainloop project version list --project my-project --status released ``` Options ``` -h, --help help for list --limit int32 number of items per page (default 50) --name string filter by version name --page int32 page number (starts at 1) (default 1) --project string project name --status string filter by status (prerelease, released) ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop project version update Update a project version ``` chainloop project version update [flags] ``` Examples ``` Mark a version as released chainloop project version update --project my-project --name v1.0.0 --is-released Rename a version chainloop project version update --project my-project --name v1.0.0 --new-name v1.0.1 ``` Options ``` -h, --help help for update --is-released mark the version as released or prerelease --name string version name --new-name string new version name --project string project name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop requirement Manage compliance requirements Options ``` -h, --help help for requirement ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop requirement delete Delete a requirement ``` chainloop requirement delete [flags] ``` Examples ``` Delete a requirement (with confirmation prompt) chainloop requirement delete --name my-requirement Delete a requirement without confirmation chainloop requirement delete --name my-requirement --yes ``` Options ``` -h, --help help for delete --name string requirement name -y, --yes skip confirmation prompt ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN ``` ### chainloop requirement describe Describe a requirement ``` chainloop requirement describe [flags] ``` Examples ``` Describe a requirement chainloop requirement describe --name my-requirement Describe a specific requirement version by revision chainloop requirement describe --name my-requirement --revision 2 Download the requirement schema chainloop requirement describe --name my-requirement --output schema ``` Options ``` -h, --help help for describe --name string requirement name --revision int32 requirement version revision number ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop requirement help Help about any command Synopsis Help provides help for any command in the application. Simply type requirement help \[path to command] for full details. ``` chainloop requirement help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop requirement list List requirements ``` chainloop requirement list [flags] ``` Examples ``` List all requirements chainloop requirement list List requirements for a specific framework chainloop requirement list --framework my-framework List requirements with pagination chainloop requirement list --page 2 --limit 10 ``` Options ``` --framework string filter requirements by framework name -h, --help help for list --limit int32 number of items per page (default 50) --page int32 page number (starts at 1) (default 1) ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop trace AI coding session tracing and attestation Options ``` -h, --help help for trace ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop trace help Help about any command Synopsis Help provides help for any command in the application. Simply type trace help \[path to command] for full details. ``` chainloop trace help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop trace init Initialize git hooks for automatic AI session tracing Synopsis Initialize git hooks that automatically trace AI coding sessions and create Chainloop attestations when you push. This installs the managed git hooks plus agent-specific hooks for the selected providers. Pass --claude and/or --cursor to pick providers; when neither flag is set, Claude Code is used as the default. Pass --org to pin the Chainloop organization trace attestations target; the value is saved to .chainloop.yml and overrides the CLI default on every push. ``` chainloop trace init [flags] ``` Options ``` --claude install Claude Code hooks (default when no provider flag is set) --cursor install Cursor hooks -h, --help help for init --project string chainloop project name --require-trace block pushes when attestation fails for AI-assisted commits ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop trace uninstall Remove trace git hooks and configuration ``` chainloop trace uninstall [flags] ``` Options ``` -h, --help help for uninstall -y, --yes skip confirmation prompt ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN ``` ## chainloop transform Transform third-party tool output into standard formats Synopsis Transform data from third-party security and quality tools into standard formats (SARIF, CycloneDX) ready for Chainloop attestation workflows. Each subcommand targets a specific tool integration. Options ``` -h, --help help for transform ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop transform help Help about any command Synopsis Help provides help for any command in the application. Simply type transform help \[path to command] for full details. ``` chainloop transform help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop transform salt Fetch Salt Security data and produce EVIDENCE JSON and/or SARIF output Synopsis Fetch data from the Salt Security API and produce output ready for Chainloop attestation workflows. The command supports three categories of data: inventory API endpoint inventory → EVIDENCE JSON (--output-file) posture-gaps Posture gap findings → SARIF 2.1.0 (--sarif-output-file) attackers Attacker findings → SARIF 2.1.0 (--sarif-output-file) By default all categories are fetched. Use --categories to select specific ones. When posture-gaps or attackers are included, a SARIF report is produced. When inventory is included, an EVIDENCE JSON is produced. Severity Mapping (Salt → SARIF): Salt Severity SARIF Level security-severity (CVSS scale) ───────────── ─────────── ────────────────────────────── Critical error 9.5 High error 8.0 Medium warning 5.5 Low note 2.5 Info note 0.1 (non-zero to stay visible in tooling) Posture gap severity comes from the Salt "severity" field. Attacker severity comes from the Salt "rulesSeverity" field. SARIF levels follow the SARIF v2.1.0 specification (3.27.10). The security-severity scores are aligned to CVSS v3.1 qualitative bands (5) since Salt does not provide native CVSS scores. ``` chainloop transform salt [flags] ``` Examples ``` Fetch everything: inventory + posture gaps + attackers chainloop transform salt \ --token $SALT_TOKEN \ --label prod \ --output-file salt-inventory.json \ --sarif-output-file salt-findings.sarif Only posture gaps with severity filter chainloop transform salt \ --token $SALT_TOKEN \ --categories posture-gaps \ --severity Critical,High \ --sarif-output-file salt-gaps.sarif Only attackers chainloop transform salt \ --token $SALT_TOKEN \ --label prod \ --categories attackers \ --attacker-status open,fixing \ --sarif-output-file salt-attackers.sarif Use in attestation workflow chainloop attestation init --workflow api-monitoring chainloop transform salt \ --token $SALT_TOKEN \ --label prod \ --output-file salt-inventory.json \ --sarif-output-file salt-findings.sarif chainloop attestation add --name salt-inventory --value salt-inventory.json chainloop attestation add --name salt-findings --value salt-findings.sarif chainloop attestation push ``` Options ``` --attacker-status string Comma-separated attacker statuses: open,fixing,resolved,ignored --categories string Categories to fetch: inventory,posture-gaps,attackers (default "inventory,posture-gaps,attackers") --dry-run Fetch and transform but only show summary --gap-status string Comma-separated posture gap statuses: Open,InProcess,Resolved,Ignored -h, --help help for salt --host-filter string Host address filter (regex) --insecure Skip TLS certificate verification --label string Comma-separated label filters for endpoint scoping --output-file string EVIDENCE JSON output file path for inventory (default: stdout) -q, --quiet Suppress progress output --sarif-output-file string SARIF output file path for posture gaps and attackers (default: stdout) --severity string Comma-separated posture gap severities: Critical,High,Medium,Low,Info --token string Salt Security API token (env: SALT_TOKEN) --url string Salt Security API URL (env: SALT_URL) (default "https://api.secured-api.com") ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -y, --yes Skip confirmation ``` ### chainloop transform sonarqube Transform SonarQube issues and hotspots into SARIF format Synopsis Fetch security issues and hotspots from the SonarQube REST API, enrich them with CWE IDs, and produce SARIF 2.1.0 output ready for Chainloop attestation workflows. The output is compatible with existing SARIF policies (cwe-top25, owasp-top10-2025, sast). ``` chainloop transform sonarqube [flags] ``` Examples ``` Basic usage chainloop transform sonarqube \ --url https://sonarqube.example.com \ --project my-project \ --branch main \ --token $SONARQUBE_TOKEN \ --output-file sonarqube-results.sarif Use in attestation workflow chainloop attestation init --workflow my-workflow chainloop transform sonarqube \ --url $SONARQUBE_URL \ --project $PROJECT_KEY \ --branch $BRANCH \ --output-file sq-results.sarif chainloop attestation add --name sast-scan --value sq-results.sarif chainloop attestation push Using environment variables export SONARQUBE_URL=https://sonarqube.example.com export SONARQUBE_TOKEN=mytoken chainloop transform sonarqube --project my-project --branch main --output-file results.sarif ``` Options ``` --branch string Branch name --categories string Categories to fetch: security,hotspots (default "security,hotspots") --dry-run Fetch and transform but only show summary --enrich-cwes Enrich issues with CWE IDs from rules API (default true) -h, --help help for sonarqube --hotspot-priorities string Comma-separated hotspot priorities to include (default "HIGH,MEDIUM") --impact-severities string Comma-separated impact severities to include (valid: HIGH, MEDIUM, LOW) (default "HIGH,MEDIUM,LOW") --insecure Skip TLS certificate verification --issue-statuses string Comma-separated issue statuses to include (default "OPEN") --output-file string Output file path (default: stdout) --project string SonarQube project key -q, --quiet Suppress progress output --token string SonarQube auth token (env: SONARQUBE_TOKEN) --url string SonarQube server URL (env: SONARQUBE_URL) ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -y, --yes Skip confirmation ``` ## chainloop version Command line version ``` chainloop version [flags] ``` Options ``` -h, --help help for version ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ## chainloop workflow Workflow management in the control plane Options ``` -h, --help help for workflow ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop workflow attached Integrations attached to workflows Options ``` -h, --help help for attached ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop workflow attached add Attach an existing registered integration to a workflow ``` chainloop workflow attached add [flags] ``` Examples ``` chainloop integration attached add --workflow deadbeef --project my-project --integration beefdoingwell --opt projectName=MyProject --opt projectVersion=1.0.0 Only send SBOMs to dependency track when the annotations in the attestation or material match the filter in an AND operation. Note: material annotations take precedence over attestation ones. chainloop integration attached add --workflow deadbeef --project my-project --integration dependency-track --opt projectName=MyProject --opt filter="environment=prod,team=security" ``` Options ``` -h, --help help for add --integration string Name of the integration already registered in this organization --opt stringArray integration attachment arguments --project string name of the project the workflow belongs to --workflow string name of the workflow to attach this integration ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop workflow attached delete Detach an integration that's attached to a workflow ``` chainloop workflow attached delete [flags] ``` Options ``` -h, --help help for delete --id string ID of the existing attachment ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop workflow attached help Help about any command Synopsis Help provides help for any command in the application. Simply type attached help \[path to command] for full details. ``` chainloop workflow attached help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop workflow attached list List integrations attached to workflows ``` chainloop workflow attached list [flags] ``` Options ``` -h, --help help for list --project string project name --workflow string workflow name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop workflow contract Workflow Contract related operations Options ``` -h, --help help for contract ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop workflow contract create Create a new contract ``` chainloop workflow contract create [flags] ``` Options ``` -f, --contract string path or URL to the contract schema --description string description of the contract -h, --help help for create --name string contract name --project string project name used to scope the contract, if not set the contract will be created in the organization ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop workflow contract delete Delete a contract ``` chainloop workflow contract delete [flags] ``` Options ``` -h, --help help for delete --name string contract name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop workflow contract describe Describe the information of the contract ``` chainloop workflow contract describe [flags] ``` Options ``` -h, --help help for describe --name string contract name --revision int32 revision of the contract to retrieve, by default is latest ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string output format, valid options are table, json or schema (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop workflow contract help Help about any command Synopsis Help provides help for any command in the application. Simply type contract help \[path to command] for full details. ``` chainloop workflow contract help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop workflow contract list List contracts ``` chainloop workflow contract list [flags] ``` Options ``` -h, --help help for list ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop workflow contract update Update an existing contract ``` chainloop workflow contract update [flags] ``` Options ``` -f, --contract string path or URL to the contract schema --description string description of the contract -h, --help help for update --name string contract name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop workflow create Create a new workflow ``` chainloop workflow create [flags] ``` Examples ``` chainloop workflow create --name [workflowName] --project [projectName] Indicate an optional team name chainloop workflow create --name release --project skynet --team core-cyberdyne Associate an existing contract referenced by its ID chainloop workflow create --name release --project skynet --contract deadbeed Or create a new contract by pointing to a local file or URL chainloop workflow create --name release --project skynet --contract ./skynet.contract.yaml chainloop workflow create --name release --project skynet --contract https://skynet.org/contract.yaml ``` Options ``` --name string workflow name --description string workflow description --project string project name --team string team name --contract string the name of an existing contract or the path/URL to a contract file. If not provided an empty one will be created. --public is the workflow public -f, --skip-if-exists do not fail if the workflow with the provided name already exists -h, --help help for create ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop workflow delete Delete an existing workflow ``` chainloop workflow delete [flags] ``` Options ``` -h, --help help for delete --name string workflow name --project string project name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop workflow describe Describe an existing workflow ``` chainloop workflow describe [flags] ``` Options ``` -h, --help help for describe --name string workflow name --project string project name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop workflow help Help about any command Synopsis Help provides help for any command in the application. Simply type workflow help \[path to command] for full details. ``` chainloop workflow help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop workflow list List existing Workflows ``` chainloop workflow list [flags] ``` Examples ``` Let the default pagination apply chainloop workflow list Specify the page and page size chainloop workflow list --page 2 --limit 10 Output in json format to paginate using scripts chainloop workflow list --page 2 --limit 10 --output json Show the full report chainloop workflow list --full ``` Options ``` --full show the full report -h, --help help for list --limit int number of items to show (default 50) --page int page number (default 1) ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop workflow update Update an existing workflow ``` chainloop workflow update [flags] ``` Options ``` --contract string the name of an existing contract --description string workflow description -h, --help help for update --name string workflow name --project string project name --public is the workflow public --team string team name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` ### chainloop workflow workflow-run Workflow Runs related operations Options ``` -h, --help help for workflow-run ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop workflow workflow-run describe View a Workflow Run ``` chainloop workflow workflow-run describe [flags] ``` Options ``` --cert string public certificate in PEM format to be used to verify the attestation --cert-chain string certificate chain (intermediates, root) in PEM format to be used to verify the attestation -d, --digest string content digest of the attestation -h, --help help for describe --id string workflow Run ID --key string public key used to verify the attestation. Note: You can also use env variable CHAINLOOP_SIGNING_PUBLIC_KEY --verify verify the attestation ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string output format, valid options are table, json, attestation, statement or payload-pae (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop workflow workflow-run help Help about any command Synopsis Help provides help for any command in the application. Simply type workflow-run help \[path to command] for full details. ``` chainloop workflow workflow-run help [command] [flags] ``` Options ``` -h, --help help for help ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ``` #### chainloop workflow workflow-run list List workflow runs ``` chainloop workflow workflow-run list [flags] ``` Options ``` --full full report -h, --help help for list --limit int number of items to show (default 50) --next string cursor to load the next page --policy-status string filter by policy violations status: all, failed, passed --project string project name --status string filter by workflow run status: [CANCELLED EXPIRED FAILED INITIALIZED SUCCEEDED] --workflow string workflow name ``` Options inherited from parent commands ``` --artifact-cas string URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443") --artifact-cas-ca string CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA) -c, --config string Path to an existing config file (default is $HOME/.config/chainloop/config.toml) --control-plane string URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443") --control-plane-ca string CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA) --debug Enable debug/verbose logging mode -i, --insecure Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE) -n, --org string organization name -o, --output string Output format, valid options are json and table (default "table") --platform string URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443") --platform-ca string CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA) -t, --token string API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN -y, --yes Skip confirmation ```