Baixar oxide-sloc 1.6.26 per a Windows

## Download

| Platform | File | Notes |
|---|---|---|
| Linux x86-64 | `oxide-sloc-linux-x86_64` | Static binary (musl) — works on any x86-64 Linux |
| Linux arm64 | `oxide-sloc-linux-arm64` | Requires glibc ≥ 2.17 (Raspberry Pi 4, AWS Graviton, Ampere, etc.) |
| Windows x86-64 | `oxide-sloc-windows-x86_64.exe` | Windows 10/11 |
| Windows x86-64 (archive) | `oxide-sloc-windows-x64.zip` / `oxide-sloc-windows-x64.tar.gz` | Same exe, zipped/tarred — used by `scripts/run.sh` + `install.sh` prebuilt path (`.tar.gz` preferred on locked-down hosts) |
| macOS x86-64 | `oxide-sloc-macos-x86_64` | Intel Mac |
| macOS Apple Silicon | `oxide-sloc-macos-arm64` | M1/M2/M3/M4 Mac |
| Vendor archive | `vendor.tar.gz.aa` + `.ab` + `.ac` + `vendor.checksums.sha256` | Rust dependency sources (split gzip parts) for air-gapped builds |
| SBOM (CycloneDX) | `oxide-sloc.cdx.json` / `sbom.cdx.json` | Syft + cargo-cyclonedx software bill of materials |
| SBOM (SPDX) | `oxide-sloc.spdx.json` | Syft software bill of materials (SPDX 2.3) |
| Vulnerability report | `grype-report.txt` | Grype scan of the CycloneDX SBOM |

Checksums for all release assets are in `SHA256SUMS.txt`.
GPG detached signatures (`.sig`), Sigstore cosign bundles (`.bundle`), and SLSA provenance attestations (`.sigstore.json`) are included for each binary.
Supply chain scanned with **Syft** (SBOM), **Grype**, and **Trivy** — full results also in the repository's Security → Code scanning tab. See `docs/supply-chain.md`.
The GPG public key used for signing is `oxide-sloc-signing-key.asc`.

## Quick install

```bash
# Linux x86-64
curl -Lo oxide-sloc https://github.com/oxide-sloc/oxide-sloc/releases/download/v1.6.26/oxide-sloc-linux-x86_64
chmod +x oxide-sloc && sudo mv oxide-sloc /usr/local/bin/

# Linux arm64
curl -Lo oxide-sloc https://github.com/oxide-sloc/oxide-sloc/releases/download/v1.6.26/oxide-sloc-linux-arm64
chmod +x oxide-sloc && sudo mv oxide-sloc /usr/local/bin/

# macOS (Apple Silicon)
curl -Lo oxide-sloc https://github.com/oxide-sloc/oxide-sloc/releases/download/v1.6.26/oxide-sloc-macos-arm64
chmod +x oxide-sloc && sudo mv oxide-sloc /usr/local/bin/

# macOS (Intel)
curl -Lo oxide-sloc https://github.com/oxide-sloc/oxide-sloc/releases/download/v1.6.26/oxide-sloc-macos-x86_64
chmod +x oxide-sloc && sudo mv oxide-sloc /usr/local/bin/

# Windows — rename and add to PATH
ren oxide-sloc-windows-x86_64.exe oxide-sloc.exe

# Verify checksum (Linux / macOS)
sha256sum --check SHA256SUMS.txt

# Verify GPG signature (Linux / macOS)
gpg --import oxide-sloc-signing-key.asc
gpg --verify oxide-sloc-linux-x86_64.sig oxide-sloc-linux-x86_64

# Verify cosign bundle (keyless — requires cosign installed).
# The identity flags pin the signature to this repo's release workflow.
cosign verify-blob \
--bundle oxide-sloc-linux-x86_64.bundle \
--certificate-identity-regexp '^https://github.com/oxide-sloc/oxide-sloc/\.github/workflows/release\.yml@refs/tags/v' \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
oxide-sloc-linux-x86_64
```

## Air-gapped build

```bash
# Download source + vendor archive from this release, then on the air-gapped machine:
bash scripts/internal/airgap-build.sh
```

## Or build from source (requires Rust 1.98+)

```bash
cargo install --git https://github.com/oxide-sloc/oxide-sloc oxide-sloc
```

## Overview

oxide-sloc v1.6.26 is a focused CLI-usability and maintenance release. It makes report
generation land somewhere predictable and open reliably, adds a one-flag way to emit every
report format from a single scan, and trims supply-chain scan noise in CI.

## What's Changed

### New Features
• **`analyze --all-formats`**：a single bundle flag that writes JSON, HTML, PDF, and CSV artifacts from one scan, instead of passing a separate `--*-out` flag per format.

### Bug Fixes
• **Reliable `analyze --open`**：reports now default to the Desktop when no output path is given, so the generated report always lands in a predictable location and opens as expected.

### Security Hardening
• Trivy SARIF upload is now limited to HIGH/CRITICAL severities, so sub-HIGH OS-package noise no longer opens GitHub code-scanning alerts.

### Documentation
• Refreshed report styling and bumped workspace dependencies to the latest compatible versions; updated the CHANGELOG, badges, and version-example snippets to v1.6.26.

**Full Changelog**：https://github.com/oxide-sloc/oxide-sloc/compare/v1.6.25...v1.6.26