Install the CLI

The checkops CLI is a single binary with no dependencies. It reads your SBOMs and scan results, sends them to CheckOps and can block your CI.

Install script (Linux, macOS)

curl --proto '=https' --tlsv1.2 -sSfL https://checkops.eu/install.sh | sh

The script detects the OS and architecture (x86_64, arm64), downloads the binary from the GitHub releases, checks its SHA-256 digest and installs it in /usr/local/bin (or ~/.local/bin when that folder is not writable).

Variable	Purpose
CHECKOPS_VERSION	Version to install, e.g. 0.37.0 (default: latest)
CHECKOPS_INSTALL_DIR	Install folder
CHECKOPS_RELEASES_URL	Internal mirror of the binaries, laid out as <url>/<version>/<file> (replaces GitHub)

Direct download

Each release ships checkops-linux-x86_64, checkops-linux-aarch64 (static, musl), checkops-darwin-x86_64, checkops-darwin-aarch64, checkops-windows-x86_64.exe and a SHA256SUMS file, on the releases page of the clearcloud-fr/checkops-cli repository.

The latest version always lives at the same address, for example:

curl -sSfLO https://github.com/clearcloud-fr/checkops-cli/releases/latest/download/checkops-linux-x86_64
curl -sSfLO https://github.com/clearcloud-fr/checkops-cli/releases/latest/download/SHA256SUMS
sha256sum --ignore-missing -c SHA256SUMS

On Windows, rename the file to checkops.exe and put it in a folder on your PATH.

Docker

docker run --rm -v "$PWD:/w" -w /w -e CHECKOPS_TOKEN registry.gitlab.com/clearcloud.fr/check-ops/cli:latest \
  push trivy.json --product acme-api --version 1.4.0

Check

checkops --version