gcloud beta container binauthz attestations list Stay organized with collections Save and categorize content based on your preferences.
- NAME
- gcloud beta container binauthz attestations list - list Binary Authorization attestations
- SYNOPSIS
gcloud beta container binauthz attestations list[--artifact-url=ARTIFACT_URL][--attestor=ATTESTOR:--attestor-project=ATTESTOR_PROJECT][--filter=EXPRESSION][--limit=LIMIT][--page-size=PAGE_SIZE][--sort-by=[FIELD,…]][--uri][GCLOUD_WIDE_FLAG …]
- DESCRIPTION
(BETA)This command lists Binary Authorization attestations foryour project. Command line flags specify which attestor and artifact to list theattestations for. If no attestor is specified, this lists all attestations inthe project, which requires thecontaineranalysis.occurrences.getpermission. If no artifact is specified, then this lists all URLs withassociated occurrences.- EXAMPLES
- List the Occurrence messages for all attestations bound to the passed attestor:
gcloudbetacontainerbinauthzattestationslist--attestor=projects/foo/attestor/barList the Occurrence messages for all attestations for the passed artifact-urlbound to the passed attestor:
gcloudbetacontainerbinauthzattestationslist--attestor=projects/foo/attestors/bar--artifact-url='gcr.io/foo/example-image@sha256:abcd' - FLAGS
--artifact-url=ARTIFACT_URL- Container URL. May be in the
gcr.io/repository/imageformat, or mayoptionally contain thehttporhttpsscheme - Attestor resource - The Attestor whose Container Analysis Note will be queriedfor attestations. Note that the caller must have the
containeranalysis.notes.listOccurrencespermission on the notebeing queried. The arguments in this group can be used to specify the attributesof this resource. --attestor=ATTESTOR- ID of the attestor or fully qualified identifier for the attestor.
To set the
nameattribute:- provide the argument
--attestoron the command line.
This flag argument must be specified if any of the other arguments in this groupare specified.
- provide the argument
--attestor-project=ATTESTOR_PROJECT- Project ID of the Google Cloud project for the attestor.
To set the
projectattribute:- provide the argument
--attestoron the command line with a fullyspecified name; - provide the argument
--attestor-projecton the command line; - provide the argument
--projecton the command line; - set the property
core/project.
- provide the argument
- LIST COMMAND FLAGS
--filter=EXPRESSION- Apply a Boolean filter
EXPRESSIONto each resource itemto be listed. If the expression evaluatesTrue, then that item islisted. For more details and examples of filter expressions, run $gcloud topic filters. This flaginteracts with other flags that are applied in this order:--flatten,--sort-by,--filter,--limit. --limit=LIMIT- Maximum number of resources to list. The default is
unlimited. Thisflag interacts with other flags that are applied in this order:--flatten,--sort-by,--filter,--limit. --page-size=PAGE_SIZE- Some services group resource list output into pages. This flag specifies themaximum number of resources per page. The default is determined by the serviceif it supports paging, otherwise it is
unlimited(no paging).Paging may be applied before or after--filterand--limitdepending on the service. --sort-by=[FIELD,…]- Comma-separated list of resource field key names to sort by. The default orderis ascending. Prefix a field with ``~´´ for descending order on thatfield. This flag interacts with other flags that are applied in this order:
--flatten,--sort-by,--filter,--limit. --uri- Print a list of resource URIs instead of the default output, and change thecommand output to a list of URIs. If this flag is used with
--format, the formatting is applied on this URI list. To displayURIs alongside other keys instead, use theuri()transform.
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$gcloud helpfor details. - NOTES
- This command is currently in beta and might change without notice. Thesevariants are also available:
gcloudcontainerbinauthzattestationslistgcloudalphacontainerbinauthzattestationslist
Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-01-21 UTC.