# chainctl update

URL: https://deploy-preview-3626--ornate-narwhal-088216.netlify.app/platform/chainctl/chainctl-docs/chainctl_update.md
Last Modified: July 22, 2026
Tags: chainctl, Reference, Product

 chainctl update Update chainctl.
Synopsis Update chainctl to the latest release.
When signature verification is enabled (currently opt-in via CHAINCTL_EXPERIMENTAL_UPDATE_VERIFY=true), the downloaded binary&rsquo;s signature is verified before it is installed; a binary that fails verification is never installed. Verification requires network access to the download host (dl.enforce.dev) and, at least on first use, to the Sigstore TUF CDN (tuf-repo-cdn.sigstore.dev). If those hosts are unreachable (for example, behind a restrictive proxy), the update fails and the current binary is left in place; as a fallback, download the latest release directly from https://dl.enforce.dev/chainctl/latest/.
chainctl update [--yes] [--force] Options --force Skip the version check and update chainctl regardless of the current version. -y, --yes Automatic yes to prompts; assume &#34;yes&#34; as answer to all prompts and run non-interactively. Options inherited from parent commands --api string The url of the Chainguard platform API. (default &#34;https://console-api.enforce.dev&#34;) --audience string The Chainguard token audience to request. (default &#34;https://console-api.enforce.dev&#34;) --config string A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly. --console string The url of the Chainguard platform Console. (default &#34;https://console.chainguard.dev&#34;) --force-color Force color output even when stdout is not a TTY. -h, --help Help for chainctl --issuer string The url of the Chainguard STS endpoint. (default &#34;https://issuer.enforce.dev&#34;) --log-level string Set the log level (debug, info) (default &#34;ERROR&#34;) -o, --output string Output format. One of: [csv, env, go-template, id, json, markdown, none, table, terse, tree, wide] -v, --v int Set the log verbosity level. SEE ALSO chainctl	- Chainguard Control 
