atomdrift Open-source, local-first supply-chain attack detection

atomscan / installation

Install Atomdrift Scan

Platform-aware installation methods for Atomdrift Scan. Review the installer source, select a supported method, or download a release artifact manually.

SHA-256 required PATH-aware destination pre-install execution check atomic replacement

Installation methods

Select by operating system and package-management preference.

Package managerHomebrew

Homebrew

Installs from the Atomdrift tap; Homebrew adds the tap automatically and controls the prefix, dependencies, upgrades, and removal.

brew install atomdrift-project/tap/scan

Supported operating systems

  • macOS
  • Linux
InstallerPOSIX sh

Shell installer

Detects the kernel, CPU architecture, and Linux libc. Uses a release binary when published and otherwise builds from source.

curl -fsSL https://install.atomdrift.org | sh

Supported operating systems

  • macOS
  • Linux (glibc)
  • Linux (musl)
  • Fedora
  • Debian
  • Ubuntu
  • openSUSE
  • Alpine
  • Wolfi
  • openEuler
  • FreeBSD
  • OpenBSD
  • NetBSD
  • DragonFly BSD
  • Solaris
  • illumos
  • Android

Requirements and targets

POSIX sh · curl, wget, fetch, or ftp · gzip · tar. BSD, Solaris, and illumos release binaries are x86-64. macOS and Linux also publish ARM64 binaries; Android uses the Linux musl artifact.

InstallerPowerShell

PowerShell installer

Installs into the current user profile and adds the destination to the user PATH.

irm https://install.atomdrift.org/ps1 | iex

Supported operating systems

  • Windows 10
  • Windows 11
  • Windows Server 2022

Requirements

x86-64 · Windows PowerShell 5.1 or PowerShell 7 · Windows 10 build 17063+ for binary installation

Manual installation

Install a specific release without executing an installer script.

GitHub release artifacts

Release archives are named by Rust target triple and contain the platform executable.

  1. Download the archive for the required operating system and architecture.
  2. Verify the archive against the release’s SHA256SUMS.
  3. Extract atomscan or atomscan.exe into a directory on PATH.
  4. Run atomscan --version before use.
Open the latest Scan release →

Installer behavior

Relevant details for review and deployment.

Artifact selection
Maps the operating system, CPU architecture, and Linux libc to a published Rust target triple. A version can be pinned explicitly.
Integrity
Requires a matching SHA-256 entry from the release’s SHA256SUMS. GitHub attestations are verified when gh is available.
Pre-install check
Executes the downloaded binary with --version before replacing an existing installation.
Destination
Prefers a writable user directory already on PATH, then an OS-appropriate system PATH directory.
Privilege
The shell installer escalates only when required, trying doas, pfexec, then sudo. PowerShell installs per-user.
Replacement and fallback
Replaces the executable atomically. Automatic mode builds from source when no matching binary is published.

Release binaries cover x86-64, Apple Silicon, Linux ARM64, s390x, RISC-V 64, and Linux PowerPC 64 LE where published. Review the shell installer or PowerShell installer before execution.