Skip to content
bezoar
Install

Self-host

1-click enterprise.

SSO, RBAC and an audit log are YAML keys, not a pricing tier. Deploy in one command; flip enterprise keys in a file.

docker compose -f bezoar.compose.yml up -d

Configuration

That's the enterprise tier.

The console is free because it's software.

bezoar.serve.yml
# enterprise features are configuration
auth:
  mode: oidc
  issuer: https://login.example.com
  client_id: bezoar-console

rbac:
  roles:
    admin: [security@example.com]
    viewer: [*@example.com]

audit:
  enabled: true
  retention_days: 365

# that's the enterprise tier.

Verify before you run

Signed. Provenanced. Checkable.

Every image is Sigstore-signed with SLSA provenance. Pin the tag, never latest.

cosign
$ cosign verify ghcr.io/ismailkharoub/bezoar:latest \
    --certificate-identity-regexp 'github.com/IsmailKharoub/bezoar' \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com
Verification for ghcr.io/ismailkharoub/bezoar:latest -- The following checks were performed…