AADSec
Home

Install and verify

Version of 28 October 2026. Commands target version 0.1.1. Platform status is in the release notes.

Before you start

  • Docker must be installed and running (scanners run in a container).
  • Linux: your account must be able to reach the Docker daemon (docker group membership, then a new session). Otherwise: "permission denied … docker.sock".
  • Windows: experimental, Docker Desktop with the WSL2 backend.
  • Platform status: see the v0.1.1 release notes on the Releases page of aadieng100/aadsec-public.

Install (macOS and Linux)

  1. Download install.sh and SHA256SUMS from the v0.1.1 release page of the aadieng100/aadsec-public repository, and read install.sh before running it:
    curl -fsSLO https://github.com/aadieng100/aadsec-public/releases/download/v0.1.1/install.sh
    curl -fsSLO https://github.com/aadieng100/aadsec-public/releases/download/v0.1.1/SHA256SUMS
  2. Run: bash install.sh
  3. Check: aadsec --version

The script installs into ~/.local/bin and verifies the binary's SHA-256 before installing. If that folder is not on your PATH, it prints the command to add to your profile. If the command is not found, add the install directory to your PATH:

For zsh (macOS default shell):
echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.zshrc && source ~/.zshrc
For bash:
echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.bashrc && source ~/.bashrc

Install (Windows, experimental)

Download install.ps1 and SHA256SUMS from the same release, read install.ps1, then run it with PowerShell (the script verifies the SHA-256 checksum before installing). The binary has no digital signature: Windows may show a SmartScreen warning.

Get the runner image (once)

docker pull ghcr.io/aadieng100/aadsec-runner:0.1.1
aadsec doctor

Verify your downloads

  • For a manual download: sha256sum -c SHA256SUMS (macOS/Linux) or Get-FileHash -Algorithm SHA256 (PowerShell) in the folder with the files. The SHA256SUMS file covers the 12 binaries and archives, not the SBOM or the install scripts.
  • SHA-256 sums are integrity checksums, not signatures.

First scan and uninstall

aadsec scan .

Then open security-output/report.html. To remove everything: aadsec uninstall