Chapter 2. Installing the Conforma command line


Install the Conforma command-line interface (CLI) to validate and inspect container images and their attestations from your local workstation.

Prerequisites

  • A working Red Hat Trusted Artifact Signer installation on Red Hat OpenShift Container Platform (OCP) version 4.13 or higher.
  • A workstation with the cosign and oc binary files installed.
  • Access to the OCP web console.

Procedure

  1. Download the ec binary file from the OCP cluster.

    1. Log in to the OCP web console. From the home page, click the ? icon, select Command line tools, go to the ec download section, then click the link for your platform.
    2. Open a terminal on your workstation, and decompress the binary .gz file by running the following command:

      $ gunzip ec-amd64.gz
      Copy to Clipboard Toggle word wrap
    3. Make the binary executable by running the following command:

      $ chmod +x ec-amd64
      Copy to Clipboard Toggle word wrap
  2. Move and rename the binary to a location within your $PATH environment:

    $ sudo mv ec-amd64 /usr/local/bin/ec
    Copy to Clipboard Toggle word wrap

Verification

  • Run the ec version command. The result should be the version of the Conforma CLI that you just installed.
Red Hat logoGithubredditYoutubeTwitter

Learn

Try, buy, & sell

Communities

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Theme

© 2026 Red Hat
Back to top