Command Overview
Reel organizes commands by verb. Most commands work standalone; agent-only commands require the --agent flag.
Command Tree
reel
list containers, images
export sbom, cbom, sarif, malware
status mode, runtime, capabilities
version
completion shell completions
Agent mode (--agent)
list + pods, files, checkpoints, layers, frames
export + checkpoint, layer, frame, memory, metadata, volatile, files, inventory
upload sbom, cbom, sarif, malware, checkpoint, layer, frame, memory, metadata, volatile, files, inventory
create checkpoint, layer, frame
delete checkpoint, layer, frame
restore layer
rollback layer
schedule view scheduled workloads
server start agent API server
health agent connectivity
license agent license status
Global Flags
| Flag | Description | Default |
|---|---|---|
| --agent | Connect to reel agent | false |
| --agent-url | Agent HTTP API URL | http://localhost:8080 |
| --runtime | Container runtime: docker, podman, containerd, crio | auto-detect |
| -v, --verbose | Verbose output (logs instead of spinner) | false |
Target Flags
Most commands accept a target via explicit flags:
| Flag | Description | Mode |
|---|---|---|
| --image | Container image reference (e.g., nginx:latest) | Standalone |
| --container | Local container name or ID | Standalone |
| --pod | Kubernetes pod name | Agent |
| --local | Scan local image only, no registry pull | Standalone |
Export vs Upload
export saves artifacts locally for inspection. upload sends them to an S3 evidence vault (agent mode only, used by the scheduler).