gooze report pull

Pulls reports from an OCI registry and extracts them into the reports directory. Use this to restore a baseline before an incremental run.

Usage

gooze report pull <reference>

This pulls the artifact and extracts it into the reports dir (-o/--output, default .gooze-reports).

Example

gooze report pull ghcr.io/your-org/your-repo/gooze-reports:main

Flags

  • -o, --output <dir>: reports directory to extract into (default .gooze-reports)
  • --plain-http: use a non-TLS (HTTP) registry
  • --insecure: skip TLS certificate verification

Authentication

For registries that require login, set GOOZE_REGISTRY_USERNAME and GOOZE_REGISTRY_PASSWORD. The password may be a token/PAT — for GHCR, use your GitHub username with a PAT (or GITHUB_TOKEN in CI).

If unset, Gooze falls back to the Docker credential store (whatever docker login saved). See CI / GitHub Actions for a full workflow.