chainctl
chainctl Chainguard Control
2 min read
For the complete documentation index, see llms.txt.
Create a role-binding
chainctl iam role-bindings create [--identity=IDENTITY] [--role=ROLE] [--parent ORGANIZATION_NAME | ORGANIZATION_ID | FOLDER_NAME | FOLDER_ID] [--output=id|json|table] # Bind a user-created identity as viewer to a location
chainctl iam role-bindings create --identity=guest-identity --role=viewer --parent=engineering
# Create a new role-binding using interactive selection for identity, role, and location
chainctl iam role-bindings create --identity string The name or ID of the identity to bind.
--parent string The name or ID of the location the role-binding belongs to. Defaults to the default.group config value (env: CHAINGUARD_DEFAULT_GROUP).
--role string The name or ID of the role to bind to the identity.
-y, --yes Automatic yes to prompts; assume "yes" as answer to all prompts and run non-interactively. --api string The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
--audience string The Chainguard token audience to request. (default "https://console-api.enforce.dev")
--config string A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
--console string The url of the Chainguard platform Console. (default "https://console.chainguard.dev")
--force-color Force color output even when stdout is not a TTY.
-h, --help Help for chainctl
--issuer string The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
--log-level string Set the log level (debug, info) (default "ERROR")
-o, --output string Output format. One of: [csv, env, go-template, id, json, markdown, none, table, terse, tree, wide]
-v, --v int Set the log verbosity level.chainctl Chainguard Control
chainctl actions Interact with the Chainguard Actions product.
chainctl actions catalog Browse the public Chainguard Actions catalog.
chainctl actions catalog list List Chainguard Actions in the public catalog.
chainctl actions discover Discover GitHub Actions dependencies used by your workflows.
Last updated: 2026-10-12 15:51