Command Overview
reel organizes commands by verb. Most commands work standalone; agent-only commands require the --agent flag.
Command Tree
Standalone
| Command | Subcommands |
|---|---|
| list | containers, images |
| export | sbom, cbom, sarif, malware |
| status | mode, versions, features |
| version | — |
| completion | shell completions |
Agent mode (--agent)
| Command | Subcommands |
|---|---|
| list | pods, files, checkpoints, layers, frames |
| export | checkpoint, layer, frame, memory, metadata, volatile, files, inventory |
| upload | sbom, cbom, malware, checkpoint, layer, frame, memory, metadata, volatile, files, inventory |
| create | checkpoint, layer, frame |
| delete | checkpoint, layer, frame |
| restore | layer |
| rollback | layer |
| schedule | view scheduled workloads |
| start | server, mcp |
| health | agent connectivity |
| license | agent license status |
Global Flags
| Flag | Description | Default |
|---|---|---|
| --agent | Connect to reel agent | false |
| --agent-url | Agent HTTP API URL | http://localhost:8080 |
| --runtime | Container runtime: docker, podman, containerd, crio | auto-detect |
| -v, --verbose | Verbose output (logs instead of spinner) | false |
Target Flags
Most commands accept a target via explicit flags:
| Flag | Description | Mode |
|---|---|---|
| --image | Container image reference (e.g., nginx:latest) | Standalone |
| --container | Local container name or ID | Standalone |
| --pod | Kubernetes pod name | Agent |
| --local | Scan local image only, no registry pull | Standalone |
Export vs Upload
export saves artifacts locally for inspection. upload sends them to an S3 evidence vault (agent mode only, used by the scheduler).