OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.
Publisher’s description
What is OpenSCA-cli?
OpenSCA-cli is an open-source program for Windows from Xmirror Security. It is written in Go.
Installation and requirements
Official installers exist for 64-bit as Portable. It runs without installation (portable).
Updates and version history
The current version is 3.0.11, released on May 15, 2026. 9 versions are listed since December 20, 2023, each with links to its own installer files. That is about 3.7 releases a year.
Popularity and file types
The source code on GitHub (XmirrorSecurity/OpenSCA-cli) has 1,137 stars.
Project description on GitHub: “OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community. ”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Portable: runs without installation
Cons
- No native ARM64 build
In short: OpenSCA-cli is an open-source Windows tool for 64-bit PCs.
Is OpenSCA-cli safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
534F3E50D246FFB77B2EF9F43BF1C15FD7F882C39E90374D942AA589FE739893· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Recent versions
All 9 versions ›9 versions over 2 years · about 3.7 a year
| Version | Date | Size | Files |
|---|---|---|---|
| 3.0.11Latest | May 15, 2026 | — | 64-bit ZIP |
| 3.0.10 | March 19, 2026 | — | 64-bit ZIP |
| 3.0.9 | January 15, 2026 | — | 64-bit ZIP |
| 3.0.8 | August 11, 2025 | — | 64-bit ZIP |
| 3.0.7 | March 28, 2025 | — | 64-bit ZIP |
| 3.0.4 | January 10, 2024 | — | 64-bit ZIP |
| 3.0.3 | December 25, 2023 | — | 64-bit ZIP |
| 3.0.2 | December 27, 2023 | — | 64-bit ZIP |
Install from the command line
Silent install ›winget install --id XmirrorSecurity.OpenSCA-cli -escoop install extras/opensca-cliRelated guide: How to use winget: install and update apps
Also for other systems
brew install opensca-cliInformation
- Publisher
- Xmirror Security
- Licence
- Apache-2.0
- Price
- Free
- Source code
- github.com/XmirrorSecurity/OpenSCA-cli
- Written in
- Go
- Requires
- Windows 11 / 10
- Architecture
- 64-bit
- Installer
- Portable
- Version
- 3.0.11
- Released
- May 15, 2026
- Added to the catalogue
- December 20, 2023
- Versions listed
- 9
- Updates / year
- 3.7
- GitHub stars
- 1,137
- GitHub forks
- 138
- Website
- opensca.xmirror.cn
- winget ID
- XmirrorSecurity.OpenSCA-cli
- Scoop package
- extras/opensca-cli
Ratings and reviews
No reviews yet. Be the first to rate it.
Frequently asked questions
Is OpenSCA-cli free?
Yes. OpenSCA-cli is open-source software under the Apache-2.0 licence.
Is OpenSCA-cli safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install OpenSCA-cli with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Does OpenSCA-cli run on ARM (Windows on Arm)?
There is no ARM64 build; Windows 11 on Arm can run the 64-bit version through emulation.
Where can I download an older version of OpenSCA-cli?
The versions page lists all 9 versions with links to their official installer files, back to December 20, 2023.
Can I use OpenSCA-cli without administrator rights?
Yes, it is portable: unpack and run it.