chainguard-dev/Setup chainctl
This action sets up the Chainguard chainctl CLI and authenticates it against the target environment.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jun 29, 2026
- License
- Apache 2.0
Pinned Snippet
uses: chainguard-dev/setup-chainctl@2cddd35a2f120d9973e58094dc6878c93cf58c28 # v0.5.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| environment | Determines the environment from which to download the chainctl binary from. | yes | enforce.dev |
| version | The version of chainctl to install (e.g. 0.2.313). Defaults to the latest release. | no | latest |
| env-auth | Determines if we export HTTP_AUTH env variable with chainctl auth token. | no | false |
| identity | The id of the identity that this workflow should assume for performing actions with chainctl. | no | — |
| audience | Specifies the identity token audience to use when creating an identity token to authenticate with Chainguard. Defaults to issuer.${environment} This field is DEPRECATED, use identity instead. | no | — |
| invite-code | Optionally specifies an invite code that allows this workflow register itself when run for the first time. Use of invite codes is DEPRECATED, use identity instead. | no | — |
| verbosity | Set the logging verbosity for chainctl. A value of 0 disables logging output. Valid values are 1-5, increasing in verbosity. | no | 0 |
| config-path | The location of the chainctl config file to use. These values override the default configuration values in the binary. | no | "" |
| retry-all-errors | Whether to retry on errors downloading the chainctl binary. | no | true |
| apk-host | The hostname to authenticate against for APK-related authentication. | no | apk.cgr.dev |
| libraries-host | The hostname to authenticate against for Chainguard Libraries-related authentication. | no | libraries.cgr.dev |
| setup-python-keyring | Whether to install the Chainguard Libraries pip keyring package. | no | false |
Outputs
no outputs