Skip to main content
The Chainloop CLI Enterprise Edition is a proprietary extension of the open-source Chainloop CLI that provides additional features and capabilities for enterprise users. It extends the existing Chainloop CLI with platform-specific functionality while maintaining full compatibility with the core Chainloop commands. This reference documents all commands available in the Enterprise Edition, including both the core open-source commands and the enterprise-specific extensions. For installation instructions, see the CLI Installation Guide.

​
chainloop admin

Admin commands for instance administrators Options 
-h, --help   help for admin
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop admin api-token

API token management Synopsis Manage instance-level API tokens Options 
-h, --help   help for api-token
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop admin api-token create

Create an API token 
chainloop admin api-token create [flags]
Options 
--description string   API token description
--expiration string    optional API token expiration, in hours i.e 1h, 24h, 178h (week), ...
-h, --help                 help for create
--name string          token name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop admin api-token help

Help about any command Synopsis Help provides help for any command in the application. Simply type api-token help [path to command] for full details. 
chainloop admin api-token help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop admin api-token list

List API tokens in this instance 
chainloop admin api-token list [flags]
Options 
-a, --all    show all API tokens including revoked ones
-h, --help   help for list
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop admin api-token revoke

revoke API token 
chainloop admin api-token revoke [flags]
Options 
--confirm     skip confirmation prompt
-h, --help        help for revoke
--id string   token ID to revoke
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop admin help

Help about any command Synopsis Help provides help for any command in the application. Simply type admin help [path to command] for full details. 
chainloop admin help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop apply

Apply compliance resources from YAML files Synopsis Apply compliance resources from a YAML file or directory. Supports multi-document YAML files with mixed resource kinds. 
chainloop apply [flags]
Examples 
Apply resources from a single file
chainloop apply -f my-framework.yaml

Apply resources from a directory
chainloop apply -f ./compliance/
Options 
-f, --file string   path to a YAML file or directory
-h, --help          help for apply
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop artifact

Download or upload Artifacts to the CAS Options 
-h, --help   help for artifact
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop artifact download

download an artifact 
chainloop artifact download [flags]
Options 
-d, --digest string   digest of the file to download
-h, --help            help for download
--output file     The file to write a single asset to (use "-" to write to standard output
--path string     download path, default to current directory
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop artifact help

Help about any command Synopsis Help provides help for any command in the application. Simply type artifact help [path to command] for full details. 
chainloop artifact help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop artifact upload

upload an artifact 
chainloop artifact upload [flags]
Options 
-f, --file string   path to file to upload
-h, --help          help for upload
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop attestation

Craft Software Supply Chain Attestations Examples 
Refer to https://docs.chainloop.dev/getting-started/attestation-crafting
Options 
--graceful-exit             exit 0 in case of error. NOTE: this flag will be removed once Chainloop reaches 1.0
-h, --help                      help for attestation
--local-state-path string   path to store the attestation state locally, default: [tmpDir]/chainloop_attestation.tmp.json
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop attestation add

add a material to the attestation 
chainloop attestation add [flags]
Examples 
Add a material to the attestation that is defined in the contract
chainloop attestation add --name <material-name> --value <material-value>

Add a material to the attestation that is not defined in the contract but you know the kind
chainloop attestation add --kind <material-kind> --value <material-value>

Add a material to the attestation without specifying neither kind nor name enables automatic detection
chainloop attestation add --value <material-value>

Add a material by also providing a URL pointing to the material. It will be downloaded to a temporary folder first
chainloop attestation add --value https://example.com/sbom.json
Options 
--annotation strings         additional annotation in the format of key=value
--attestation-id string      Unique identifier of the in-progress attestation
-h, --help                       help for add
--kind string                kind of the material to be recorded: ["ARTIFACT" "ATTESTATION" "BLACKDUCK_SCA_JSON" "CHAINLOOP_AI_AGENT_CONFIG" "CHAINLOOP_AI_CODING_SESSION" "CHAINLOOP_PR_INFO" "CHAINLOOP_RUNNER_CONTEXT" "CONTAINER_IMAGE" "CSAF_INFORMATIONAL_ADVISORY" "CSAF_SECURITY_ADVISORY" "CSAF_SECURITY_INCIDENT_RESPONSE" "CSAF_VEX" "EVIDENCE" "GHAS_CODE_SCAN" "GHAS_DEPENDENCY_SCAN" "GHAS_SECRET_SCAN" "GITLAB_SECURITY_REPORT" "GITLEAKS_JSON" "HELM_CHART" "JACOCO_XML" "JUNIT_XML" "OPENVEX" "SARIF" "SBOM_CYCLONEDX_JSON" "SBOM_SPDX_JSON" "SLSA_PROVENANCE" "STRING" "TWISTCLI_SCAN_JSON" "ZAP_DAST_ZIP"]
--name string                name of the material as shown in the contract
--no-strict-validation       skip strict schema validation for SBOM_CYCLONEDX_JSON materials
--registry-password string   registry password, ($CHAINLOOP_REGISTRY_PASSWORD)
--registry-server string     OCI repository server, ($CHAINLOOP_REGISTRY_SERVER)
--registry-username string   registry username, ($CHAINLOOP_REGISTRY_USERNAME)
--value string               value to be recorded
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
--graceful-exit             exit 0 in case of error. NOTE: this flag will be removed once Chainloop reaches 1.0
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
--local-state-path string   path to store the attestation state locally, default: [tmpDir]/chainloop_attestation.tmp.json
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop attestation help

Help about any command Synopsis Help provides help for any command in the application. Simply type attestation help [path to command] for full details. 
chainloop attestation help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
--graceful-exit             exit 0 in case of error. NOTE: this flag will be removed once Chainloop reaches 1.0
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
--local-state-path string   path to store the attestation state locally, default: [tmpDir]/chainloop_attestation.tmp.json
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop attestation init

start attestation crafting process 
chainloop attestation init [flags]
Options 
--collectors strings      comma-separated list of additional collectors to enable (e.g. aiconfig)
--contract string         name of an existing contract or the path/URL to a contract file, to attach it to the auto-created workflow (it doesn't update an existing one)
--contract-revision int   revision of the contract to retrieve, "latest" by default
--dry-run                 do not record attestation in the control plane, useful for development
--existing-version        return an error if the version doesn't exist in the project
-h, --help                    help for init
--project string          name of the project of this workflow
--release                 promote the provided version as a release
--remote-state            Store the attestation state remotely
-f, --replace                 replace any existing in-progress attestation
--version string          project version, i.e 0.1.0
--workflow string         name of the workflow to run the attestation
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
--graceful-exit             exit 0 in case of error. NOTE: this flag will be removed once Chainloop reaches 1.0
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
--local-state-path string   path to store the attestation state locally, default: [tmpDir]/chainloop_attestation.tmp.json
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop attestation push

generate and push the attestation to the control plane 
chainloop attestation push [flags]
Examples 
chainloop attestation push --key <key path>|<env://VAR_NAME> --token [chainloop-token] --annotation key=value,key2=val2

sign the resulting attestation using a cosign key present in the filesystem and stdin for the passphrase
NOTE that the --token flag can be replaced by having the CHAINLOOP_TOKEN env variable
chainloop attestation push --key cosign.key --token [chainloop-token]

or retrieve the key from an environment variable containing the private key
chainloop attestation push --key env://[ENV_VAR]

The passphrase can be retrieved from a well-known environment variable
export CHAINLOOP_SIGNING_PASSWORD="my cosign key passphrase"
chainloop attestation push --key cosign.key

You can provide values for the annotations that have previously defined in the contract for example
chainloop attestation push --annotation key=value --annotation key2=value2
Or alternatively
chainloop attestation push --annotation key=value,key2=value2
Options 
--annotation strings              additional annotation in the format of key=value
--attestation-id string           Unique identifier of the in-progress attestation
--bundle string                   output a Sigstore bundle to the provided path
--deactivate-ci-report            deactivate automatic attestation report to CI/CD platform
--exception-bypass-policy-check   do not fail this command on policy violations enforcement
-h, --help                            help for push
-k, --key string                      reference (path or env variable name) to the cosign or KMS key that will be used to sign the attestation
--signserver-ca-path string       custom CA to be used for SignServer TLS connection
--signserver-client-cert string   path to client certificate in PEM format for authenticated SignServer TLS connection
--signserver-client-pass string   certificate passphrase for authenticated SignServer TLS connection
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
--graceful-exit             exit 0 in case of error. NOTE: this flag will be removed once Chainloop reaches 1.0
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
--local-state-path string   path to store the attestation state locally, default: [tmpDir]/chainloop_attestation.tmp.json
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop attestation reset

mark current attestation process as canceled or failed 
chainloop attestation reset [flags]
Options 
--attestation-id string   Unique identifier of the in-progress attestation
-h, --help                    help for reset
--reason string           reset reason
--trigger string          trigger for the reset, valid options are "failure" and "cancellation" (default "failure")
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
--graceful-exit             exit 0 in case of error. NOTE: this flag will be removed once Chainloop reaches 1.0
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
--local-state-path string   path to store the attestation state locally, default: [tmpDir]/chainloop_attestation.tmp.json
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop attestation status

check the status of the current attestation process 
chainloop attestation status [flags]
Options 
--attestation-id string   Unique identifier of the in-progress attestation
--full                    full report including current recorded values
-h, --help                    help for status
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
--graceful-exit             exit 0 in case of error. NOTE: this flag will be removed once Chainloop reaches 1.0
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
--local-state-path string   path to store the attestation state locally, default: [tmpDir]/chainloop_attestation.tmp.json
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop attestation verify

verify an attestation Synopsis Verify an attestation by validating its validation material against the configured trusted root 
chainloop attestation verify file-or-url
Examples 
verify local attestation
chainloop attestation verify --bundle attestation.json

verify an attestation stored in an https endpoint
chainloop attestation verify -b https://myrepository/attestation.json
Options 
-b, --bundle string   bundle path or URL
-h, --help            help for verify
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
--graceful-exit             exit 0 in case of error. NOTE: this flag will be removed once Chainloop reaches 1.0
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
--local-state-path string   path to store the attestation state locally, default: [tmpDir]/chainloop_attestation.tmp.json
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop auth

Authenticate with the Control Plane Options 
-h, --help   help for auth
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop auth delete-account

delete your account 
chainloop auth delete-account [flags]
Options 
-h, --help   help for delete-account
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop auth help

Help about any command Synopsis Help provides help for any command in the application. Simply type auth help [path to command] for full details. 
chainloop auth help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop auth login

authenticate the CLI with the Control Plane 
chainloop auth login [flags]
Options 
-h, --help           help for login
--skip-browser   perform a headless login process without opening a browser
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop cas-backend

Operations on Artifact CAS backends Options 
-h, --help   help for cas-backend
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop cas-backend add

Add a new Artifact CAS backend Options 
--default              set the backend as default in your organization
--description string   descriptive information for this registration
--fallback             set the backend as fallback in your organization
-h, --help                 help for add
--max-bytes string     Maximum size for each blob stored in this backend (e.g., 100MB, 1GB)
--name string          CAS backend name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop cas-backend add aws-s3

Register a AWS S3 storage bucket 
chainloop cas-backend add aws-s3 [flags]
Options 
--access-key-id string       AWS Access Key ID
--bucket string              S3 bucket name
--endpoint string            Custom Endpoint URL for other S3 compatible backends i.e MinIO
-h, --help                       help for aws-s3
--region string              AWS region for the bucket
--secret-access-key string   AWS Secret Access Key
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
--default                   set the backend as default in your organization
--description string        descriptive information for this registration
--fallback                  set the backend as fallback in your organization
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
--max-bytes string          Maximum size for each blob stored in this backend (e.g., 100MB, 1GB)
--name string               CAS backend name
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop cas-backend add azure-blob

Register a Azure Blob Storage CAS Backend 
chainloop cas-backend add azure-blob [flags]
Options 
--client-id string         Service Principal Client ID
--client-secret string     Service Principal Client Secret
--container string         Storage Container Name (default "chainloop")
--endpoint string          Custom Azure Blob endpoint suffix (e.g., blob.core.usgovcloudapi.net), if not provided, the public Azure cloud endpoint will be used.
-h, --help                     help for azure-blob
--storage-account string   Storage Account Name
--tenant string            Active Directory Tenant ID
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
--default                   set the backend as default in your organization
--description string        descriptive information for this registration
--fallback                  set the backend as fallback in your organization
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
--max-bytes string          Maximum size for each blob stored in this backend (e.g., 100MB, 1GB)
--name string               CAS backend name
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop cas-backend add help

Help about any command Synopsis Help provides help for any command in the application. Simply type add help [path to command] for full details. 
chainloop cas-backend add help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
--default                   set the backend as default in your organization
--description string        descriptive information for this registration
--fallback                  set the backend as fallback in your organization
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
--max-bytes string          Maximum size for each blob stored in this backend (e.g., 100MB, 1GB)
--name string               CAS backend name
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop cas-backend add oci

Register a OCI CAS Backend 
chainloop cas-backend add oci [flags]
Options 
-h, --help              help for oci
-p, --password string   registry password
--repo string       FQDN repository name, including path
-u, --username string   registry username
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
--default                   set the backend as default in your organization
--description string        descriptive information for this registration
--fallback                  set the backend as fallback in your organization
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
--max-bytes string          Maximum size for each blob stored in this backend (e.g., 100MB, 1GB)
--name string               CAS backend name
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop cas-backend delete

Delete a CAS Backend from your organization 
chainloop cas-backend delete [flags]
Options 
-h, --help          help for delete
--name string   CAS Backend name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop cas-backend help

Help about any command Synopsis Help provides help for any command in the application. Simply type cas-backend help [path to command] for full details. 
chainloop cas-backend help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop cas-backend list

List CAS Backends from your organization 
chainloop cas-backend list [flags]
Options 
--full   show the full output
-h, --help   help for list
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop cas-backend update

Update a CAS backend description, credentials, default status, fallback status, or max bytes Options 
--default              set the backend as default in your organization
--description string   descriptive information for this registration
--fallback             set the backend as fallback in your organization
-h, --help                 help for update
--max-bytes string     Maximum size for each blob stored in this backend (e.g., 100MB, 1GB). Note: not supported for inline backends.
--name string          CAS backend name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop cas-backend update aws-s3

Update a AWS S3 CAS Backend description, credentials, default status, or max bytes 
chainloop cas-backend update aws-s3 [flags]
Options 
--access-key-id string       AWS Access Key ID
-h, --help                       help for aws-s3
--name string                CAS Backend name
--region string              AWS region for the bucket
--secret-access-key string   AWS Secret Access Key
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
--default                   set the backend as default in your organization
--description string        descriptive information for this registration
--fallback                  set the backend as fallback in your organization
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
--max-bytes string          Maximum size for each blob stored in this backend (e.g., 100MB, 1GB). Note: not supported for inline backends.
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop cas-backend update azure-blob

Update a AzureBlob CAS Backend description, credentials, default status, or max bytes 
chainloop cas-backend update azure-blob [flags]
Options 
--client-id string       Service Principal Client ID
--client-secret string   Service Principal Client Secret
-h, --help                   help for azure-blob
--name string            CAS Backend name
--tenant string          Active Directory Tenant ID
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
--default                   set the backend as default in your organization
--description string        descriptive information for this registration
--fallback                  set the backend as fallback in your organization
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
--max-bytes string          Maximum size for each blob stored in this backend (e.g., 100MB, 1GB). Note: not supported for inline backends.
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop cas-backend update help

Help about any command Synopsis Help provides help for any command in the application. Simply type update help [path to command] for full details. 
chainloop cas-backend update help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
--default                   set the backend as default in your organization
--description string        descriptive information for this registration
--fallback                  set the backend as fallback in your organization
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
--max-bytes string          Maximum size for each blob stored in this backend (e.g., 100MB, 1GB). Note: not supported for inline backends.
--name string               CAS backend name
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop cas-backend update inline

Update the Inline CAS Backend description, default status, or fallback status 
chainloop cas-backend update inline [flags]
Options 
-h, --help          help for inline
--name string   CAS Backend name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
--default                   set the backend as default in your organization
--description string        descriptive information for this registration
--fallback                  set the backend as fallback in your organization
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
--max-bytes string          Maximum size for each blob stored in this backend (e.g., 100MB, 1GB). Note: not supported for inline backends.
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop cas-backend update oci

Update a OCI CAS Backend description, credentials, default status, or max bytes 
chainloop cas-backend update oci [flags]
Options 
-h, --help              help for oci
--name string       CAS Backend name
-p, --password string   registry password
-u, --username string   registry username
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
--default                   set the backend as default in your organization
--description string        descriptive information for this registration
--fallback                  set the backend as fallback in your organization
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
--max-bytes string          Maximum size for each blob stored in this backend (e.g., 100MB, 1GB). Note: not supported for inline backends.
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop config

Configure this client Options 
-h, --help   help for config
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop config help

Help about any command Synopsis Help provides help for any command in the application. Simply type config help [path to command] for full details. 
chainloop config help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop config plugin

Manage plugins (preview) Synopsis Manage Chainloop CLI plugins (preview) Options 
-h, --help   help for plugin
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop config plugin describe

Show detailed information about a plugin 
chainloop config plugin describe [flags]
Options 
-h, --help          help for describe
--name string   Name of the plugin to describe (required)
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop config plugin help

Help about any command Synopsis Help provides help for any command in the application. Simply type plugin help [path to command] for full details. 
chainloop config plugin help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop config plugin install

Install a plugin Synopsis Install a plugin to the plugins directory from a specified URL or local file. 
chainloop config plugin install [flags]
Options 
-f, --file string   URL or path to the plugin to install
-h, --help          help for install
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop config plugin list

List installed plugins 
chainloop config plugin list [flags]
Options 
-h, --help   help for list
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop config reset

Reset the CLI configuration 
chainloop config reset [flags]
Options 
-h, --help   help for reset
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop config save

Persist the current settings to the config file 
chainloop config save [flags]
Examples 
chainloop config save --control-plane localhost:1234 --artifact-cas localhost:1235
Options 
-h, --help   help for save
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop config view

View the current CLI configuration 
chainloop config view [flags]
Options 
-h, --help   help for view
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop deployment

(Preview) Deployment record operations Options 
-h, --help   help for deployment
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop deployment help

Help about any command Synopsis Help provides help for any command in the application. Simply type deployment help [path to command] for full details. 
chainloop deployment help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop deployment list

List deployment records 
chainloop deployment list [flags]
Examples 
List deployment records (shows latest per slot by default)
chainloop deployment list

Filter by environment
chainloop deployment list --env prod-k8s

Filter by project and version
chainloop deployment list --project my-project --project-version v1.0.0

Filter by status
chainloop deployment list --status deployed

Show full history for a specific slot
chainloop deployment list --env prod-k8s --name myapp-web --history

Show full history for all slots
chainloop deployment list --history
Options 
--env string               filter by environment name
-h, --help                     help for list
--history                  show full history instead of only the latest record per slot
--limit int32              number of items per page (default 50)
--logical-env string       filter by logical environment name
--name string              filter by deployment name (slot identifier)
--page int32               page number (starts at 1) (default 1)
--project string           filter by project name
--project-version string   filter by project version (requires --project)
--status string            filter by deployment status (deployed, decommissioned, superseded)
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop deployment record

Record a deployment 
chainloop deployment record [flags]
Examples 
Record a container image deployment using an OCI reference (resolves digest automatically)
chainloop deployment record --env prod-k8s --oci-ref ghcr.io/chainloop-dev/platform/backend:v1.31.0 --kind CONTAINER_IMAGE --status deployed --deployment-name backend --logical-env production

Record using a pre-computed digest (no image reference needed)
chainloop deployment record --env prod-k8s --digest sha256:abc123 --kind CONTAINER_IMAGE --status deployed --deployment-name myapp-web --logical-env staging

Record with explicit registry credentials
chainloop deployment record --env prod-k8s --oci-ref private.registry.io/myapp:latest --kind CONTAINER_IMAGE --status deployed --deployment-name myapp --logical-env production --registry-server private.registry.io --registry-username user --registry-password pass
Options 
--deployment-name string     stable slot identifier within an environment
--digest string              artifact digest (mutually exclusive with --oci-ref)
--env string                 environment name
-h, --help                       help for record
--kind string                artifact kind (CONTAINER_IMAGE, HELM_CHART)
--logical-env string         logical environment name (e.g. staging, production)
--oci-ref string             OCI image reference to resolve digest from (e.g. ghcr.io/org/repo:tag)
--registry-password string   registry password ($CHAINLOOP_REGISTRY_PASSWORD)
--registry-server string     OCI registry server ($CHAINLOOP_REGISTRY_SERVER)
--registry-username string   registry username ($CHAINLOOP_REGISTRY_USERNAME)
--status string              deployment status (deployed, decommissioned, superseded)
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop discover

(Preview) inspect pieces of evidence or artifacts stored through Chainloop 
chainloop discover [flags]
Options 
-d, --digest string   hash of the attestation, piece of evidence or artifact, i.e sha256:deadbeef
-h, --help            help for discover
-k, --kind string     optional kind of the referrer, used to disambiguate between multiple referrers with the same digest
--public          discover from public shared index instead of your organizations'
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop environment

(Preview) Manage environments Options 
-h, --help   help for environment
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop environment create

Create a new environment 
chainloop environment create [flags]
Examples 
Create a Kubernetes environment
chainloop environment create --name prod-k8s --type kubernetes

Create an environment with description
chainloop environment create --name staging-ecs --type ecs --description "Staging ECS cluster"
Options 
--description string   environment description
-h, --help                 help for create
--name string          environment name (DNS-1123 format: lowercase, numbers, hyphens)
--type string          environment type (kubernetes, ecs, server, lambda, custom)
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop environment delete

Delete an environment 
chainloop environment delete [flags]
Examples 
Delete an environment (with confirmation prompt)
chainloop environment delete --name prod-k8s

Delete without confirmation
chainloop environment delete --name prod-k8s --yes
Options 
-h, --help          help for delete
--name string   environment name
-y, --yes           skip confirmation prompt
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN

​
chainloop environment describe

Describe an environment 
chainloop environment describe [flags]
Examples 
Describe an environment by name
chainloop environment describe --name prod-k8s
Options 
-h, --help          help for describe
--name string   environment name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop environment help

Help about any command Synopsis Help provides help for any command in the application. Simply type environment help [path to command] for full details. 
chainloop environment help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop environment list

List environments 
chainloop environment list [flags]
Examples 
List all environments
chainloop environment list

Filter by query
chainloop environment list --query prod
Options 
-h, --help           help for list
--limit int32    number of items per page (default 50)
--page int32     page number (starts at 1) (default 1)
--query string   search across name and description
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop environment logical

Logical environment operations Options 
-h, --help   help for logical
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop environment logical create

Create a logical environment 
chainloop environment logical create [flags]
Examples 
Create a logical environment
chainloop environment logical create --name QA --description "Quality assurance environments"
Options 
--description string   logical environment description
-h, --help                 help for create
--name string          logical environment name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop environment logical delete

Delete a logical environment 
chainloop environment logical delete [flags]
Examples 
Delete a logical environment (with confirmation prompt)
chainloop environment logical delete --name QA

Delete without confirmation
chainloop environment logical delete --name QA --yes
Options 
-h, --help          help for delete
--name string   logical environment name
-y, --yes           skip confirmation prompt
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN

​
chainloop environment logical describe

Describe a logical environment 
chainloop environment logical describe [flags]
Examples 
Describe a logical environment by name
chainloop environment logical describe --name Production
Options 
-h, --help          help for describe
--name string   logical environment name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop environment logical help

Help about any command Synopsis Help provides help for any command in the application. Simply type logical help [path to command] for full details. 
chainloop environment logical help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop environment logical list

List logical environments 
chainloop environment logical list [flags]
Examples 
List all logical environments
chainloop environment logical list

Search by query
chainloop environment logical list --query prod
Options 
-h, --help           help for list
--limit int32    number of items per page (default 50)
--page int32     page number (starts at 1) (default 1)
--query string   search across name and description
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop environment logical update

Update a logical environment 
chainloop environment logical update [flags]
Examples 
Update logical environment description
chainloop environment logical update --name Production --description "Production deployment environments"
Options 
--description string   new description
-h, --help                 help for update
--name string          logical environment name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop environment update

Update an environment 
chainloop environment update [flags]
Examples 
Update environment description
chainloop environment update --name prod-k8s --description "Production Kubernetes cluster"

Change environment type
chainloop environment update --name prod-k8s --type ecs
Options 
--description string   new description
-h, --help                 help for update
--name string          environment name
--type string          new environment type (kubernetes, ecs, server, lambda, custom)
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop evidence

Manage evidence Synopsis Commands for interacting with pieces of evidence in your organization Options 
-h, --help   help for evidence
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop evidence help

Help about any command Synopsis Help provides help for any command in the application. Simply type evidence help [path to command] for full details. 
chainloop evidence help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop evidence list

List evidence Synopsis List the pieces of evidence registered in your organization 
chainloop evidence list [flags]
Examples 
List all evidence
chainloop evidence list

Filter by project
chainloop evidence list --project myapp

Filter by project version
chainloop evidence list --project myapp --project-version v1.0.0

Filter by product
chainloop evidence list --product-id <uuid> --product-version-id <uuid>

Filter by kind (multiple)
chainloop evidence list --kind SBOM_CYCLONEDX_JSON --kind SARIF

Search by name, subject, or digest
chainloop evidence list --search sha256:abc123...

Pagination
chainloop evidence list --project myapp --limit 20
chainloop evidence list --project myapp --limit 20 --next MjAy...

JSON output
chainloop evidence list --project myapp --output json
Options 
-h, --help                        help for list
--hide-attestation            exclude attestation evidence from results
--kind strings                evidence kind (repeatable, e.g., SBOM_CYCLONEDX_JSON, SARIF)
--latest                      show only latest evidence (requires project or product filter)
--limit int32                 number of items to show (1-200) (default 50)
--next string                 cursor to load the next page
--product-id string           product ID (requires --product-version-id)
--product-version-id string   product version ID (requires --product-id)
--project string              project name
--project-version string      project version name (requires --project)
--search string               search by evidence name, subject name, or digest
--workflow strings            workflow name (repeatable)
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop framework

Manage compliance frameworks Options 
-h, --help   help for framework
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop framework delete

Delete a framework 
chainloop framework delete [flags]
Examples 
Delete a framework (with confirmation prompt)
chainloop framework delete --name my-framework

Delete a framework without confirmation
chainloop framework delete --name my-framework --yes
Options 
-h, --help          help for delete
--name string   framework name
-y, --yes           skip confirmation prompt
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN

​
chainloop framework describe

Describe a framework 
chainloop framework describe [flags]
Examples 
Describe a framework
chainloop framework describe --name my-framework

Download the framework schema
chainloop framework describe --name my-framework --output schema
Options 
-h, --help          help for describe
--name string   framework name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop framework help

Help about any command Synopsis Help provides help for any command in the application. Simply type framework help [path to command] for full details. 
chainloop framework help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop framework list

List frameworks 
chainloop framework list [flags]
Options 
--builtin   Show only builtin frameworks
--custom    Show only custom frameworks
-h, --help      help for list
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop gather-runner-context

Gather runner context data from a given provider Synopsis Gather runner context data from a given provider (GitHub or GitLab). This command retrieves repository configuration data including branch protection rules, rulesets, and contributor information from the specified provider. The command supports auto-detection of configuration from environment variables:
  • Provider: Auto-detected from GITHUB_TOKEN/GITHUB_REPOSITORY (GitHub) or CI_PROJECT_ID/CI_PROJECT_NAMESPACE (GitLab)
  • Organization: Auto-detected from GITHUB_REPOSITORY or CI_PROJECT_NAMESPACE
  • Repository: Auto-detected from GITHUB_REPOSITORY or CI_PROJECT_ID
  • Token: Auto-detected from GITLAB_TOKEN (GitLab only)
chainloop gather-runner-context [flags]
Examples 
Using flags
chainloop gather-runner-context --runner-provider github --runner-token <token> --runner-org myorg --runner-repo myrepo

Using environment variables (GitHub Actions)
export GITHUB_TOKEN=<token>
export GITHUB_REPOSITORY=myorg/myrepo
chainloop gather-runner-context

Using environment variables (GitLab CI)
export GITLAB_TOKEN=<token>
export CI_PROJECT_NAMESPACE=myorg
export CI_PROJECT_ID=12345
chainloop gather-runner-context
Options 
--branches string          Comma-separated list of branch name patterns to fetch (e.g., main,dev*,feature/*). Supports fnmatch patterns where * matches any characters except /, ** matches across directories, ? matches single character, and [abc] matches character classes. If not specified, all branches are fetched.
--fetch-contributors       Fetch contributor information from the repository (contributors, members, and 2FA status)
-h, --help                     help for gather-runner-context
--max-tags int             Maximum number of tags to include (most recent first). 0 means no limit. (default 15)
--output-file string       Output file path for the runner context data (JSON format) (default "runner-context.json")
--runner-api-url string    Provider API URL
--runner-org string        The owner of the repository (e.g., chainloop-dev)
--runner-provider string   Provider name (e.g., github, gitlab)
--runner-repo string       The repository name for which the context data is gathered (e.g., chainloop)
--runner-token string      Provider access token with read rights to the given repository
--tags string              Comma-separated list of tag name patterns to fetch (e.g., v*,release-*). Supports fnmatch patterns. If not specified, all tags are fetched.
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop integration

Third party integrations Options 
-h, --help   help for integration
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop integration attached

Integrations attached to workflows Options 
-h, --help   help for attached
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop integration attached add

Attach an existing registered integration to a workflow 
chainloop integration attached add [flags]
Examples 
chainloop integration attached add --workflow deadbeef --project my-project --integration beefdoingwell --opt projectName=MyProject --opt projectVersion=1.0.0

Only send SBOMs to dependency track when the annotations in the attestation or material match the filter in an AND operation.
Note: material annotations take precedence over attestation ones.
chainloop integration attached add --workflow deadbeef --project my-project --integration dependency-track --opt projectName=MyProject --opt filter="environment=prod,team=security"
Options 
-h, --help                 help for add
--integration string   Name of the integration already registered in this organization
--opt stringArray      integration attachment arguments
--project string       name of the project the workflow belongs to
--workflow string      name of the workflow to attach this integration
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop integration attached delete

Detach an integration that’s attached to a workflow 
chainloop integration attached delete [flags]
Options 
-h, --help        help for delete
--id string   ID of the existing attachment
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop integration attached help

Help about any command Synopsis Help provides help for any command in the application. Simply type attached help [path to command] for full details. 
chainloop integration attached help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop integration attached list

List integrations attached to workflows 
chainloop integration attached list [flags]
Options 
-h, --help              help for list
--project string    project name
--workflow string   workflow name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop integration available

Integrations available in the platform ready to be registered Options 
-h, --help   help for available
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop integration available describe

Describe integration 
chainloop integration available describe [flags]
Options 
--full          show the full output including JSON schemas
-h, --help          help for describe
--name string   integration name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop integration available help

Help about any command Synopsis Help provides help for any command in the application. Simply type available help [path to command] for full details. 
chainloop integration available help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop integration available list

List available integrations 
chainloop integration available list [flags]
Options 
-h, --help   help for list
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop integration help

Help about any command Synopsis Help provides help for any command in the application. Simply type integration help [path to command] for full details. 
chainloop integration help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop integration registered

Integrations registered and configured in your Organization Options 
-h, --help   help for registered
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop integration registered add

Register a new instance of an integration 
chainloop integration registered add INTEGRATION_ID --name [registration-name] --options key=value,key=value [flags]
Examples 
chainloop integration registered add dependencytrack --name send-to-prod --opt instance=https://deptrack.company.com,apiKey=1234567890 --opt username=chainloop
Options 
--description string   integration registration description
-h, --help                 help for add
--name string          unique registration name, i.e my-registration, sboms-to-prod, etc.
--opt stringArray      integration arguments
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop integration registered delete

De-register an integration 
chainloop integration registered delete [flags]
Options 
-h, --help        help for delete
--id string   integration registration ID
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop integration registered help

Help about any command Synopsis Help provides help for any command in the application. Simply type registered help [path to command] for full details. 
chainloop integration registered help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop integration registered list

List registered integrations 
chainloop integration registered list [flags]
Options 
-h, --help   help for list
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization

Organizations management Options 
-h, --help   help for organization
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization api-token

API token management Synopsis Manage API tokens to authenticate with the Chainloop API or perform attestations. Options 
-h, --help   help for api-token
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization api-token create

Create an API token 
chainloop organization api-token create [flags]
Options 
--description string    API token description
--expiration duration   optional API token expiration, in hours i.e 1h, 24h, 178h (week), ...
-h, --help                  help for create
--name string           token name
--project string        project name used to scope the token, if not set the token will be created at the organization level
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             output format, valid options are table, json, token (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization api-token help

Help about any command Synopsis Help provides help for any command in the application. Simply type api-token help [path to command] for full details. 
chainloop organization api-token help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization api-token list

List API tokens in this organization 
chainloop organization api-token list [flags]
Options 
-h, --help             help for list
-p, --project string   filter by project name
-s, --scope string     filter by scope, available scopes: [project global]
--status string    filter by token status, available values: [active revoked all]
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization api-token revoke

revoke API token 
chainloop organization api-token revoke [flags]
Options 
-h, --help        help for revoke
--id string   API token ID
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization create

Create an organization 
chainloop organization create [flags]
Options 
-h, --help          help for create
--name string   organization name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization delete

Delete an organization Synopsis Delete an organization. Only organization owners can delete an organization. 
chainloop organization delete [flags]
Options 
-h, --help          help for delete
--name string   organization name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization describe

Describe the current organization 
chainloop organization describe [flags]
Options 
-h, --help   help for describe
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization help

Help about any command Synopsis Help provides help for any command in the application. Simply type organization help [path to command] for full details. 
chainloop organization help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization leave

leave an organization 
chainloop organization leave [flags]
Options 
-h, --help          help for leave
--name string   organization name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization list

List the organizations this user has access to 
chainloop organization list [flags]
Options 
-h, --help   help for list
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization member

Organization members management Options 
-h, --help   help for member
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization member delete

Remove a member from the current organization 
chainloop organization member delete [flags]
Options 
-h, --help        help for delete
--id string   Membership ID
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization member help

Help about any command Synopsis Help provides help for any command in the application. Simply type member help [path to command] for full details. 
chainloop organization member help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization member invitation

User Invitations Options 
-h, --help   help for invitation
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation
chainloop organization member invitation create
Invite a User to an Organization 
chainloop organization member invitation create [flags]
Options 
-h, --help              help for create
--receiver string   Email of the user to invite
--role string       Role of the user in the organization, available admin, owner, viewer (default "viewer")
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation
chainloop organization member invitation help
Help about any command Synopsis Help provides help for any command in the application. Simply type invitation help [path to command] for full details. 
chainloop organization member invitation help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation
chainloop organization member invitation list
List sent invitations 
chainloop organization member invitation list [flags]
Options 
-h, --help   help for list
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation
chainloop organization member invitation revoke
Revoke a pending invitation 
chainloop organization member invitation revoke [flags]
Options 
-h, --help        help for revoke
--id string   Invitation ID
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization member list

List the members of the current organization 
chainloop organization member list [flags]
Examples 
Let the default pagination apply
chainloop organization member list

Specify the page and page size
chainloop organization member list --page 2 --limit 10

Filter by name
chainloop organization member list --name alice

Filter by email
chainloop organization member list --email [email protected]

Filter by role
chainloop organization member list --role admin

Combine filters and pagination
chainloop organization member list --role admin --page 2 --limit 5
Options 
--email string   Filter by member email
-h, --help           help for list
--limit int      number of items to show (default 50)
--name string    Filter by member name or last name
--page int       page number (default 1)
--role string    Role of the user in the organization, available admin, owner, viewer
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization member update

Update a member of the organization 
chainloop organization member update [flags]
Options 
-h, --help          help for update
--id string     Membership ID
--role string   Role of the user in the organization, available admin, owner, viewer (default "viewer")
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization set

Set the current organization to be used by this CLI 
chainloop organization set [flags]
Examples 

Set the current organization to be used by this CLI
$ chainloop org set --name my-org

Optionally set the organization as the default one for all clients by storing the preference server-side
$ chainloop org set --name my-org --default
Options 
--default       set this organization as the default one for all clients
-h, --help          help for set
--name string   organization name to make the switch
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop organization update

Update an existing organization 
chainloop organization update [flags]
Options 
--api-token-max-days-inactive string   maximum days of inactivity before API tokens are auto-revoked (e.g. '90', '0' to disable)
--block                                set the default policy violation blocking strategy
--disable-requirements-auto-matching   disable requirements auto-matching
--enable-ai-agent-collector            enable automatic AI agent config collection during attestation init
--frameworks-built-in                  enable built-in compliance frameworks
--frameworks-preview                   enable preview compliance frameworks
-h, --help                                 help for update
--name string                          organization name
--policies-allowed-hostnames strings   set the allowed hostnames for the policy engine
--prevent-implicit-workflow-creation   prevent workflows and projects from being created implicitly during attestation init
--restrict-contract-creation           restrict contract creation (org-level and project-level) to only organization admins (owner/admin roles)
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy

Craft chainloop policies Options 
-h, --help   help for policy
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy create

Create a new policy 
chainloop policy create [flags]
Examples 
Create a policy
chainloop policy create --file my-policy.yaml
Options 
-f, --file string   policy file path (YAML or JSON)
-h, --help          help for create
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy delete

Delete a policy 
chainloop policy delete [flags]
Examples 
Delete a policy
chainloop policy delete --name my-policy
Options 
-h, --help          help for delete
--name string   policy name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy describe

Describe a policy 
chainloop policy describe [flags]
Examples 
Describe a policy by name
chainloop policy describe --name my-policy

Describe a specific policy version by digest
chainloop policy describe --name my-policy --digest sha256:abc123

Describe a policy from a specific organization
chainloop policy describe --name my-policy --organization myorg
Options 
--digest string         specific policy version digest
-h, --help                  help for describe
--name string           policy name
--organization string   organization name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy develop

Tools for policy development Synopsis A set of tools to facilitate policy development. Refer to https://docs.chainloop.dev/guides/custom-policies for more information. Options 
-h, --help   help for develop
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy develop eval

Evaluate policy against provided material Synopsis Perform a full evaluation of the policy against the provided material type. The command checks if there is a path in the policy for the specified kind and evaluates the policy against the provided material or attestation. 
chainloop policy develop eval [flags]
Examples 

Evaluate policy against a material file
chainloop policy develop eval --policy policy.yaml --material sbom.json --kind SBOM_CYCLONEDX_JSON --annotation key1=value1,key2=value2 --input key3=value3
Options 
--allowed-hostnames strings   Additional hostnames allowed for http.send requests in policies
--annotation strings          Key-value pairs of material annotations (key=value)
-h, --help                        help for eval
--input stringArray           Key-value pairs of policy inputs (key=value)
--kind string                 Kind of the material: ["ARTIFACT" "ATTESTATION" "BLACKDUCK_SCA_JSON" "CHAINLOOP_AI_AGENT_CONFIG" "CHAINLOOP_AI_CODING_SESSION" "CHAINLOOP_PR_INFO" "CHAINLOOP_RUNNER_CONTEXT" "CONTAINER_IMAGE" "CSAF_INFORMATIONAL_ADVISORY" "CSAF_SECURITY_ADVISORY" "CSAF_SECURITY_INCIDENT_RESPONSE" "CSAF_VEX" "EVIDENCE" "GHAS_CODE_SCAN" "GHAS_DEPENDENCY_SCAN" "GHAS_SECRET_SCAN" "GITLAB_SECURITY_REPORT" "GITLEAKS_JSON" "HELM_CHART" "JACOCO_XML" "JUNIT_XML" "OPENVEX" "SARIF" "SBOM_CYCLONEDX_JSON" "SBOM_SPDX_JSON" "SLSA_PROVENANCE" "STRING" "TWISTCLI_SCAN_JSON" "ZAP_DAST_ZIP"]
--material string             Path to material or attestation file
-p, --policy string               Policy reference (./my-policy.yaml, https://my-domain.com/my-policy.yaml, chainloop://my-stored-policy) (default "policy.yaml")
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy develop help

Help about any command Synopsis Help provides help for any command in the application. Simply type develop help [path to command] for full details. 
chainloop policy develop help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy develop init

Initialize a new policy Synopsis Initialize a new policy by creating template policy files in the specified directory. By default, it creates chainloop-policy.yaml and chainloop-policy.rego files. 
chainloop policy develop init [flags]
Examples 

Initialize in current directory with separate files
chainloop policy develop init

Initialize in specific directory with embedded format and policy name
chainloop policy develop init --directory ./policies --embedded --name mypolicy
Options 
--description string   description of the policy
--directory string     directory for policy
--embedded             initialize an embedded policy (single YAML file)
-f, --force                overwrite existing files
-h, --help                 help for init
--name string          name of the policy
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy develop lint

Lint chainloop policy structure and content Synopsis Performs comprehensive validation of:
  • *.yaml files (schema validation)
  • *.rego (formatting, linting, structure)
chainloop policy develop lint [flags]
Options 
--format                Auto-format standalone policy rego files with opa fmt (embedded policies not supported)
-h, --help                  help for lint
-p, --policy string         Path to policy file (default "policy.yaml")
--regal-config string   Path to custom regal config (Default: https://github.com/chainloop-dev/chainloop/tree/main/app/cli/internal/policydevel/.regal.yaml)
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy help

Help about any command Synopsis Help provides help for any command in the application. Simply type policy help [path to command] for full details. 
chainloop policy help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy list

List policies 
chainloop policy list [flags]
Options 
--builtin   Show only builtin policies
--custom    Show only custom policies
-h, --help      help for list
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy update

Update an existing policy 
chainloop policy update [flags]
Examples 
Update a policy
chainloop policy update --file my-policy.yaml
Options 
-f, --file string   policy file path
-h, --help          help for update
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy-group

Policy group operations Options 
-h, --help   help for policy-group
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy-group create

Create a new policy group 
chainloop policy-group create [flags]
Examples 
Create a policy group from file
chainloop policy-group create --file my-policy-group.yaml
Options 
-f, --file string   policy group file path
-h, --help          help for create
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy-group delete

Delete a policy group 
chainloop policy-group delete [flags]
Examples 
Delete a policy group
chainloop policy-group delete --name my-policy-group
Options 
-h, --help          help for delete
--name string   policy group name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy-group describe

Describe a policy group 
chainloop policy-group describe [flags]
Examples 
Describe a policy group by name
chainloop policy-group describe --name my-policy-group

Describe a specific policy group version by digest
chainloop policy-group describe --name my-policy-group --digest sha256:abc123

Describe a policy group from a specific organization
chainloop policy-group describe --name my-policy-group --organization myorg
Options 
--digest string         specific policy group version digest
-h, --help                  help for describe
--name string           policy group name
--organization string   organization name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy-group help

Help about any command Synopsis Help provides help for any command in the application. Simply type policy-group help [path to command] for full details. 
chainloop policy-group help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy-group list

List policy groups 
chainloop policy-group list [flags]
Examples 
List all policy groups
chainloop policy-group list
Options 
--builtin   Show only builtin policy groups
--custom    Show only custom policy groups
-h, --help      help for list
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop policy-group update

Update an existing policy group 
chainloop policy-group update [flags]
Examples 
Update a policy group from file
chainloop policy-group update --file my-policy-group.yaml
Options 
-f, --file string   policy group file path
-h, --help          help for update
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop product

Product operations Options 
-h, --help   help for product
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop product create

Create a new product 
chainloop product create [flags]
Examples 
Create a product
chainloop product create --name my-product --description "My product description"
Options 
--description string   product description
-h, --help                 help for create
--name string          product name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop product delete

Delete a product 
chainloop product delete [flags]
Examples 
Delete a product
chainloop product delete --name my-product

Delete a product without confirmation
chainloop product delete --name my-product --yes
Options 
-h, --help          help for delete
--name string   product name
-y, --yes           skip confirmation prompt
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN

​
chainloop product describe

Describe a product 
chainloop product describe [flags]
Examples 
Describe a product
chainloop product describe --name my-product
Options 
-h, --help          help for describe
--name string   product name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop product help

Help about any command Synopsis Help provides help for any command in the application. Simply type product help [path to command] for full details. 
chainloop product help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop product list

List products 
chainloop product list [flags]
Examples 
List all products
chainloop product list

List products with pagination
chainloop product list --page 2 --limit 10
Options 
-h, --help          help for list
--limit int32   number of items per page (default 50)
--name string   filter by product name
--page int32    page number (starts at 1) (default 1)
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop product update

Update a product 
chainloop product update [flags]
Examples 
Update product description
chainloop product update --name my-product --description "New description"

Rename a product
chainloop product update --name my-product --new-name new-product-name
Options 
--description string   new product description
-h, --help                 help for update
--name string          product name
--new-name string      new product name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop product version

Product version operations Options 
-h, --help   help for version
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop product version attach-framework

Attach a framework to a product version 
chainloop product version attach-framework [flags]
Examples 
Attach a framework to a product version
chainloop product version attach-framework --product my-product --version v1.0.0 --framework my-framework
Options 
--framework string   framework name
-h, --help               help for attach-framework
--product string     product name
--version string     product version name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop product version attach-project

Attach a project to a product version 
chainloop product version attach-project [flags]
Examples 
Attach a project tracking latest version
chainloop product version attach-project --product my-product --version v1.0.0 --project my-project --track-latest

Attach a project with a specific version
chainloop product version attach-project --product my-product --version v1.0.0 --project my-project --project-version v2.0.0
Options 
-h, --help                     help for attach-project
--product string           product name
--project string           project name
--project-version string   project version name (mutually exclusive with --track-latest)
--track-latest             track the latest project version (mutually exclusive with --project-version)
--version string           product version name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop product version create

Create a new product version 
chainloop product version create [flags]
Examples 
Create a new version
chainloop product version create --product my-product --name v1.0.0

Create a version with description
chainloop product version create --product my-product --name v1.0.0 --description "Initial release"

Clone from an existing version
chainloop product version create --product my-product --name v2.0.0 --from-version v1.0.0
Options 
--description string    version description
--from-version string   clone from existing version (by name)
-h, --help                  help for create
--name string           version name
--product string        product name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop product version delete

Delete a product version 
chainloop product version delete [flags]
Examples 
Delete a specific version
chainloop product version delete --product my-product --version v1.0.0

Delete a version without confirmation
chainloop product version delete --product my-product --version v1.0.0 --yes
Options 
-h, --help             help for delete
--product string   product name
--version string   version name
-y, --yes              skip confirmation prompt
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN

​
chainloop product version describe

Describe a product version 
chainloop product version describe [flags]
Examples 
Describe a specific version
chainloop product version describe --product my-product --version v1.0.0
Options 
-h, --help             help for describe
--product string   product name
--version string   version name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop product version detach-framework

Detach a framework from a product version 
chainloop product version detach-framework [flags]
Examples 
Detach a framework from a product version
chainloop product version detach-framework --product my-product --version v1.0.0 --framework my-framework
Options 
--framework string   framework name
-h, --help               help for detach-framework
--product string     product name
--version string     product version name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop product version detach-project

Detach a project from a product version 
chainloop product version detach-project [flags]
Examples 
Detach a project from a product version
chainloop product version detach-project --product my-product --version v1.0.0 --project my-project
Options 
-h, --help             help for detach-project
--product string   product name
--project string   project name
--version string   product version name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop product version help

Help about any command Synopsis Help provides help for any command in the application. Simply type version help [path to command] for full details. 
chainloop product version help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop product version list

List product versions 
chainloop product version list [flags]
Examples 
List all versions for a product
chainloop product version list --product my-product

List with pagination
chainloop product version list --product my-product --page 2 --limit 10
Options 
-h, --help             help for list
--limit int32      number of items per page (default 50)
--page int32       page number (starts at 1) (default 1)
--product string   product name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop product version update

Update a product version 
chainloop product version update [flags]
Examples 
Mark a version as released
chainloop product version update --product my-product --version v1.0.0 --is-released

Rename a version
chainloop product version update --product my-product --version v1.0.0 --new-name v1.0.1

Update description
chainloop product version update --product my-product --version v1.0.0 --description "Updated description"
Options 
--description string   new version description
-h, --help                 help for update
--is-released          mark the version as released or prerelease
--new-name string      new version name
--product string       product name
--version string       version name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop project

Project operations Options 
-h, --help   help for project
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop project create

Create a new project 
chainloop project create [flags]
Examples 
Create a project with name and description
chainloop project create --name my-project --description "My project description"

Create a project with just a name
chainloop project create --name my-project
Options 
--description string   project description
-h, --help                 help for create
--name string          project name (DNS-1123 format: lowercase, numbers, hyphens)
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop project delete

Delete a project 
chainloop project delete [flags]
Examples 
Delete a project (with confirmation prompt)
chainloop project delete --name my-project

Delete a project without confirmation
chainloop project delete --name my-project --yes
Options 
-h, --help          help for delete
--name string   project name
-y, --yes           skip confirmation prompt
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN

​
chainloop project describe

Describe a project 
chainloop project describe [flags]
Examples 
Describe a project by name
chainloop project describe --name my-project
Options 
-h, --help          help for describe
--name string   project name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop project help

Help about any command Synopsis Help provides help for any command in the application. Simply type project help [path to command] for full details. 
chainloop project help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop project list

List projects 
chainloop project list [flags]
Examples 
List all projects
chainloop project list

List projects with pagination
chainloop project list --page 2 --limit 10

Filter by project name
chainloop project list --name my-project

Filter by description
chainloop project list --description "production"
Options 
--description string   filter by description
-h, --help                 help for list
--limit int32          number of items per page (default 50)
--name string          filter by project name
--page int32           page number (starts at 1) (default 1)
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop project update

Update a project 
chainloop project update [flags]
Examples 
Update project description
chainloop project update --name my-project --description "New description"
Options 
--description string   new project description
-h, --help                 help for update
--name string          project name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop project version

Project version operations Options 
-h, --help   help for version
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop project version create

Create a new project version 
chainloop project version create [flags]
Examples 
Create a new prerelease version
chainloop project version create --project my-project --name v1.0.0

Create a released version
chainloop project version create --project my-project --name v1.0.0 --is-released
Options 
-h, --help             help for create
--is-released      mark the version as released
--name string      version name
--project string   project name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop project version delete

Delete a project version 
chainloop project version delete [flags]
Examples 
Delete a specific version (with confirmation prompt)
chainloop project version delete --project my-project --name v1.0.0

Delete a version without confirmation
chainloop project version delete --project my-project --name v1.0.0 --yes
Options 
-h, --help             help for delete
--name string      version name
--project string   project name
-y, --yes              skip confirmation prompt
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN

​
chainloop project version describe

Describe a project version 
chainloop project version describe [flags]
Examples 
Describe a specific version
chainloop project version describe --project my-project --name v1.0.0
Options 
-h, --help             help for describe
--name string      version name
--project string   project name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop project version help

Help about any command Synopsis Help provides help for any command in the application. Simply type version help [path to command] for full details. 
chainloop project version help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop project version list

List project versions 
chainloop project version list [flags]
Examples 
List all versions for a project
chainloop project version list --project my-project

List with pagination
chainloop project version list --project my-project --page 2 --limit 10

Filter by version name
chainloop project version list --project my-project --name v1

Filter by status
chainloop project version list --project my-project --status released
Options 
-h, --help             help for list
--limit int32      number of items per page (default 50)
--name string      filter by version name
--page int32       page number (starts at 1) (default 1)
--project string   project name
--status string    filter by status (prerelease, released)
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop project version update

Update a project version 
chainloop project version update [flags]
Examples 
Mark a version as released
chainloop project version update --project my-project --name v1.0.0 --is-released

Rename a version
chainloop project version update --project my-project --name v1.0.0 --new-name v1.0.1
Options 
-h, --help              help for update
--is-released       mark the version as released or prerelease
--name string       version name
--new-name string   new version name
--project string    project name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop requirement

Manage compliance requirements Options 
-h, --help   help for requirement
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop requirement delete

Delete a requirement 
chainloop requirement delete [flags]
Examples 
Delete a requirement (with confirmation prompt)
chainloop requirement delete --name my-requirement

Delete a requirement without confirmation
chainloop requirement delete --name my-requirement --yes
Options 
-h, --help          help for delete
--name string   requirement name
-y, --yes           skip confirmation prompt
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN

​
chainloop requirement describe

Describe a requirement 
chainloop requirement describe [flags]
Examples 
Describe a requirement
chainloop requirement describe --name my-requirement

Describe a specific requirement version by revision
chainloop requirement describe --name my-requirement --revision 2

Download the requirement schema
chainloop requirement describe --name my-requirement --output schema
Options 
-h, --help             help for describe
--name string      requirement name
--revision int32   requirement version revision number
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop requirement help

Help about any command Synopsis Help provides help for any command in the application. Simply type requirement help [path to command] for full details. 
chainloop requirement help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop requirement list

List requirements 
chainloop requirement list [flags]
Options 
--builtin   Show only builtin requirements
--custom    Show only custom requirements
-h, --help      help for list
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop trace

AI coding session tracing and attestation Options 
-h, --help   help for trace
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop trace help

Help about any command Synopsis Help provides help for any command in the application. Simply type trace help [path to command] for full details. 
chainloop trace help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop trace init

Initialize git hooks for automatic AI session tracing Synopsis Initialize git hooks that automatically trace AI coding sessions and create Chainloop attestations when you commit and push. This installs two hooks:
  • commit-msg: adds a Chainloop-Attestation-ID trailer to each commit
  • pre-push: collects session evidence and pushes the attestation
chainloop trace init [flags]
Options 
-h, --help             help for init
--project string   chainloop project name ($CHAINLOOP_PROJECT)
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop trace uninstall

Remove trace git hooks and configuration 
chainloop trace uninstall [flags]
Options 
-h, --help   help for uninstall
-y, --yes    skip confirmation prompt
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN

​
chainloop version

Command line version 
chainloop version [flags]
Options 
-h, --help   help for version
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow

Workflow management in the control plane Options 
-h, --help   help for workflow
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow attached

Integrations attached to workflows Options 
-h, --help   help for attached
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow attached add

Attach an existing registered integration to a workflow 
chainloop workflow attached add [flags]
Examples 
chainloop integration attached add --workflow deadbeef --project my-project --integration beefdoingwell --opt projectName=MyProject --opt projectVersion=1.0.0

Only send SBOMs to dependency track when the annotations in the attestation or material match the filter in an AND operation.
Note: material annotations take precedence over attestation ones.
chainloop integration attached add --workflow deadbeef --project my-project --integration dependency-track --opt projectName=MyProject --opt filter="environment=prod,team=security"
Options 
-h, --help                 help for add
--integration string   Name of the integration already registered in this organization
--opt stringArray      integration attachment arguments
--project string       name of the project the workflow belongs to
--workflow string      name of the workflow to attach this integration
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow attached delete

Detach an integration that’s attached to a workflow 
chainloop workflow attached delete [flags]
Options 
-h, --help        help for delete
--id string   ID of the existing attachment
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow attached help

Help about any command Synopsis Help provides help for any command in the application. Simply type attached help [path to command] for full details. 
chainloop workflow attached help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow attached list

List integrations attached to workflows 
chainloop workflow attached list [flags]
Options 
-h, --help              help for list
--project string    project name
--workflow string   workflow name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow contract

Workflow Contract related operations Options 
-h, --help   help for contract
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow contract create

Create a new contract 
chainloop workflow contract create [flags]
Options 
-f, --contract string      path or URL to the contract schema
--description string   description of the contract
-h, --help                 help for create
--name string          contract name
--project string       project name used to scope the contract, if not set the contract will be created in the organization
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow contract delete

Delete a contract 
chainloop workflow contract delete [flags]
Options 
-h, --help          help for delete
--name string   contract name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow contract describe

Describe the information of the contract 
chainloop workflow contract describe [flags]
Options 
-h, --help             help for describe
--name string      contract name
--revision int32   revision of the contract to retrieve, by default is latest
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             output format, valid options are table, json or schema (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow contract help

Help about any command Synopsis Help provides help for any command in the application. Simply type contract help [path to command] for full details. 
chainloop workflow contract help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow contract list

List contracts 
chainloop workflow contract list [flags]
Options 
-h, --help   help for list
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow contract update

Update an existing contract 
chainloop workflow contract update [flags]
Options 
-f, --contract string      path or URL to the contract schema
--description string   description of the contract
-h, --help                 help for update
--name string          contract name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow create

Create a new workflow 
chainloop workflow create [flags]
Examples 
chainloop workflow create --name [workflowName] --project [projectName]

Indicate an optional team name
chainloop workflow create --name release --project skynet --team core-cyberdyne

Associate an existing contract referenced by its ID
chainloop workflow create --name release --project skynet --contract deadbeed

Or create a new contract by pointing to a local file or URL
chainloop workflow create --name release --project skynet --contract ./skynet.contract.yaml
chainloop workflow create --name release --project skynet --contract https://skynet.org/contract.yaml
Options 
--name string          workflow name
--description string   workflow description
--project string       project name
--team string          team name
--contract string      the name of an existing contract or the path/URL to a contract file. If not provided an empty one will be created.
--public               is the workflow public
-f, --skip-if-exists       do not fail if the workflow with the provided name already exists
-h, --help                 help for create
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow delete

Delete an existing workflow 
chainloop workflow delete [flags]
Options 
-h, --help             help for delete
--name string      workflow name
--project string   project name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow describe

Describe an existing workflow 
chainloop workflow describe [flags]
Options 
-h, --help             help for describe
--name string      workflow name
--project string   project name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow help

Help about any command Synopsis Help provides help for any command in the application. Simply type workflow help [path to command] for full details. 
chainloop workflow help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow list

List existing Workflows 
chainloop workflow list [flags]
Examples 
Let the default pagination apply
chainloop workflow list

Specify the page and page size
chainloop workflow list --page 2 --limit 10

Output in json format to paginate using scripts
chainloop workflow list --page 2 --limit 10 --output json

Show the full report
chainloop workflow list --full
Options 
--full        show the full report
-h, --help        help for list
--limit int   number of items to show (default 50)
--page int    page number (default 1)
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow update

Update an existing workflow 
chainloop workflow update [flags]
Options 
--contract string      the name of an existing contract
--description string   workflow description
-h, --help                 help for update
--name string          workflow name
--project string       project name
--public               is the workflow public
--team string          team name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow workflow-run

Workflow Runs related operations Options 
-h, --help   help for workflow-run
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow workflow-run describe

View a Workflow Run 
chainloop workflow workflow-run describe [flags]
Options 
--cert string         public certificate in PEM format to be used to verify the attestation
--cert-chain string   certificate chain (intermediates, root) in PEM format to be used to verify the attestation
-d, --digest string       content digest of the attestation
-h, --help                help for describe
--id string           workflow Run ID
--key string          public key used to verify the attestation. Note: You can also use env variable CHAINLOOP_SIGNING_PUBLIC_KEY
--verify              verify the attestation
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             output format, valid options are table, json, attestation, statement or payload-pae (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow workflow-run help

Help about any command Synopsis Help provides help for any command in the application. Simply type workflow-run help [path to command] for full details. 
chainloop workflow workflow-run help [command] [flags]
Options 
-h, --help   help for help
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation

​
chainloop workflow workflow-run list

List workflow runs 
chainloop workflow workflow-run list [flags]
Options 
--full                   full report
-h, --help                   help for list
--limit int              number of items to show (default 50)
--next string            cursor to load the next page
--policy-status string   filter by policy violations status: all, failed, passed
--project string         project name
--status string          filter by workflow run status: [CANCELLED EXPIRED FAILED INITIALIZED SUCCEEDED]
--workflow string        workflow name
Options inherited from parent commands 
--artifact-cas string       URL for the Artifacts Content Addressable Storage API ($CHAINLOOP_ARTIFACT_CAS_API) (default "api.cas.chainloop.dev:443")
--artifact-cas-ca string    CUSTOM CA file for the Artifacts CAS API (optional) ($CHAINLOOP_ARTIFACT_CAS_API_CA)
-c, --config string             Path to an existing config file (default is $HOME/.config/chainloop/config.toml)
--control-plane string      URL for the Control Plane API ($CHAINLOOP_CONTROL_PLANE_API) (default "api.cp.chainloop.dev:443")
--control-plane-ca string   CUSTOM CA file for the Control Plane API (optional) ($CHAINLOOP_CONTROL_PLANE_API_CA)
--debug                     Enable debug/verbose logging mode
-i, --insecure                  Skip TLS transport during connection to the control plane ($CHAINLOOP_API_INSECURE)
-n, --org string                organization name
-o, --output string             Output format, valid options are json and table (default "table")
--platform string           URL for the platform backend API ($CHAINLOOP_PLATFORM_API) (default "api.app.chainloop.dev:443")
--platform-ca string        CUSTOM CA file for the Platform API (optional) ($CHAINLOOP_PLATFORM_API_CA)
-t, --token string              API token. NOTE: Alternatively use the env variable CHAINLOOP_TOKEN
-y, --yes                       Skip confirmation