go install, as a prebuilt binary, as a Docker image, or built from source. Pick whichever fits your workflow, none require the others.
go install
Requires the Go toolchain.This installs the CLI as
scanoss-cli (Go names the binary after its
package directory), matching the examples throughout this section and
avoiding a clash with the SCANOSS scan engine (also scanoss) on your
PATH.Prebuilt Binary
Download the archive for your platform from the releases page, extract it, and move thescanoss-cli binary onto your PATH:
- Windows — unzip the
.zipand add the folder to yourPATH. - macOS — an unsigned direct download may be quarantined by Gatekeeper; clear it with
xattr -d com.apple.quarantine ./scanoss-cli.
checksums.txt:
Docker
Multi-arch images (linux/amd64, linux/arm64) are published to GHCR on each release. Mount the code to scan and pass the CLI arguments:
:latest or a version tag (e.g. :0.1.0).
The image runs as a non-root user, so writing output into the mounted
folder (
--output /src/results.json) can fail with a permission error.
Either redirect stdout on the host as above, or run the container as your
own user so writes are owned by you: