Tags and entitlements
An environment's name identifies the task; its tag identifies the version. The name is fixed for the life of the task. The tag changes when the environment is rebuilt.
For what the six parts of a name mean, see Concepts.
What your organization holds
A grant is a pair: an environment, and the tag patterns you may pull from it.
Patterns use * and ? only — not regular expressions, and not shell
globbing beyond those two characters.
| Pattern | Matches | Does not match |
|---|---|---|
v1.* |
v1.0, v1.2.3 |
v10.0 |
v1.0 |
v1.0 exactly |
v1.0.1 |
* |
every tag | — |
v1.* not matching v10.0 is the case worth remembering: * matches any run
of characters, so the dot after v1 is what excludes v10.
Listing the tags you can pull
A tag listing is filtered to what you hold, so a short list is entitlement working rather than an error:
curl -su "x:$SAVANTENVS_API_KEY" \
https://inventory.forallsecure.com/v2/<environment-name>/tags/listAn environment you hold no grant on returns 404, exactly as a misspelled name
does.