chainguard-dev/Setup chainctl

This action sets up the Chainguard chainctl CLI and authenticates it against the target environment.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jun 29, 2026
License
Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: chainguard-dev/setup-chainctl@2cddd35a2f120d9973e58094dc6878c93cf58c28 # v0.5.1

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
environmentDetermines the environment from which to download the chainctl binary from. yesenforce.dev
versionThe version of chainctl to install (e.g. 0.2.313). Defaults to the latest release. nolatest
env-authDetermines if we export HTTP_AUTH env variable with chainctl auth token. nofalse
identityThe id of the identity that this workflow should assume for performing actions with chainctl. no
audienceSpecifies the identity token audience to use when creating an identity token to authenticate with Chainguard. Defaults to issuer.${environment} This field is DEPRECATED, use identity instead. no
invite-codeOptionally specifies an invite code that allows this workflow register itself when run for the first time. Use of invite codes is DEPRECATED, use identity instead. no
verbositySet the logging verbosity for chainctl. A value of 0 disables logging output. Valid values are 1-5, increasing in verbosity. no0
config-pathThe location of the chainctl config file to use. These values override the default configuration values in the binary. no""
retry-all-errorsWhether to retry on errors downloading the chainctl binary. notrue
apk-hostThe hostname to authenticate against for APK-related authentication. noapk.cgr.dev
libraries-hostThe hostname to authenticate against for Chainguard Libraries-related authentication. nolibraries.cgr.dev
setup-python-keyringWhether to install the Chainguard Libraries pip keyring package. nofalse

no outputs