Install ARGUS¶

ARGUS is a single static binary. Pick your platform — installation is one command.

Windows¶

Installer (recommended)Portable EXE

# Download the NSIS installer
iwr https://github.com/vatsayanvivek/argus/releases/latest/download/argus-installer.exe -OutFile argus-installer.exe
# Run it (adds argus to PATH)
.\argus-installer.exe

iwr https://github.com/vatsayanvivek/argus/releases/latest/download/argus-windows-amd64.exe -OutFile argus.exe
.\argus.exe install

Windows SmartScreen

On unsigned binaries, SmartScreen shows "Unknown publisher" and asks you to click "More info → Run anyway." This is expected until code-signing is in place — see Trust & verification for how to verify the binary instead.

macOS¶

Apple Silicon (M1 / M2 / M3)Intel

curl -L https://github.com/vatsayanvivek/argus/releases/latest/download/argus-darwin-arm64 -o argus
chmod +x argus
./argus install

curl -L https://github.com/vatsayanvivek/argus/releases/latest/download/argus-darwin-amd64 -o argus
chmod +x argus
./argus install

macOS Gatekeeper

First run may be blocked. Right-click → Open, then accept the prompt. Binaries will be notarised in a future release.

Linux¶

amd64arm64

curl -L https://github.com/vatsayanvivek/argus/releases/latest/download/argus-linux-amd64 -o argus
chmod +x argus
sudo ./argus install

curl -L https://github.com/vatsayanvivek/argus/releases/latest/download/argus-linux-arm64 -o argus
chmod +x argus
sudo ./argus install

Docker¶

# Pull the hardened Chainguard-based image
docker pull ghcr.io/vatsayanvivek/argus:latest

# Run with your Azure credentials + output mounted to your host
docker run --rm \
  -v ~/.azure:/home/nonroot/.azure:ro \
  -v "$(pwd)/argus-output":/out \
  ghcr.io/vatsayanvivek/argus:latest \
  scan --out /out

PowerShell

docker run --rm `
  -v ${HOME}/.azure:/home/nonroot/.azure:ro `
  -v "${PWD}/argus-output:/out" `
  ghcr.io/vatsayanvivek/argus:latest `
  scan --out /out

From source¶

Requires Go 1.25+.

git clone https://github.com/vatsayanvivek/argus.git
cd argus
make build
./argus --version

Verify the download¶

Every release ships with:

SHA-256 checksums — SHA256SUMS
Cosign signature — SHA256SUMS.sig, SHA256SUMS.pem
SLSA build provenance — attached to release artifacts
SPDX SBOM — argus-v*-sbom.spdx.json

See Trust & verification for the exact cosign verify-blob commands.