Get the binary.
Build from source until signed release binaries are published. Requires a Rust toolchain (1.80+).
Signed archives will ship once the release workflow runs.
Global flags
These flags work on every flareo subcommand. Flag precedence goes command-line > environment variable > config file > default.
Initialize a new Flareo project in the current directory. Creates a flareo.json manifest with sane defaults, detects your Dockerfile, and sets up a .gitignore entry for the build cache.
Authenticate with Flareo via GitHub OAuth. Opens a browser to the consent page; once approved, drops an encrypted token at ~/.flareo/config.json. Required before publish, deploy, or billing.
Search the Flareo catalog by name, tag, or author. Results are sorted by trust score by default. Returns a table in the terminal, or JSON with --json for pipelines.
Pull a verified module and its signed digest. Unlike docker pull, flareo pull runs cosign verify and slsa-verifier before the image lands on disk. If any check fails, nothing is pulled and the command exits non-zero.
Run the three-check verification suite against any image reference or digest, without pulling. Useful inside CI pipelines as a gate.
Generate a docker-compose.yaml for a module, with the image pinned to the signed digest. Output goes to stdout by default.
Convenience wrapper around flareo compose + docker compose up -d. For local runs only. Flareo never runs your containers remotely — deploy happens on your machine.
Submit a module to the Flareo pipeline. Reads flareo.json from the current directory, uploads the Dockerfile and build context, and triggers the six-stage pipeline.
Show everything Flareo knows about a module: digest, SBOM summary, provenance trail, signature identity, full build record. Read-only.
Stream live pipeline logs for a build or module. Works with a build ID (#0847), a module name, or --pipeline for the global firehose.
Print the live Flareo pipeline health: region, version, build count last 7 days, scan pass rate, median stage latency.
Show your current plan, usage in the billing period, and upcoming invoice. During public beta this returns a flat "all features free" response.
All Flareo commands return standard POSIX exit codes. Use them with set -e in shell pipelines and CI workflows.