Installation

Prerequisites: Same build requirements as your Java/Kotlin project (Maven or Gradle, project dependencies). Java runtime is bundled with release archives.

Homebrew (Linux/macOS)

brew install --cask seqra/tap/opentaint

npm

If you have Node.js installed, you can install opentaint from npm. The package bundles the analyzer, rules, and a Java runtime, so no separate Java install is required.

Run without installing — npx downloads the package and runs any command directly:

# Scan the current directory
npx @seqra/opentaint scan

# Quick smoke test
npx @seqra/opentaint --version

Install globally:

npm install -g @seqra/opentaint
opentaint --version

The correct binary for your platform (Linux, macOS, or Windows; x64 or arm64) is selected automatically. Updates are managed by npm — run npm install -g @seqra/opentaint@latest to upgrade.

Install Scripts

The install scripts accept an optional version argument (leading v optional). Without one, the latest GitHub release is installed. You can pin to:

• an exact version — v0.4.5
• the newest patch of a minor line — v0.4 (resolves to the newest v0.4.x)
• the newest release of a major line — v0 (resolves to the newest v0.x.y)

The leading v is optional in every form (0.4.5 works the same as v0.4.5).

Linux/macOS:

# Latest
curl -fsSL https://opentaint.org/install.sh | bash

# Exact version, minor line, or major line
curl -fsSL https://opentaint.org/install.sh | bash -s -- v0.4.5
curl -fsSL https://opentaint.org/install.sh | bash -s -- v0.4
curl -fsSL https://opentaint.org/install.sh | bash -s -- v0

Windows (PowerShell):

# Latest
irm https://opentaint.org/install.ps1 | iex

# Exact version, minor line, or major line
& ([scriptblock]::Create((irm https://opentaint.org/install.ps1))) -Version v0.4.5
& ([scriptblock]::Create((irm https://opentaint.org/install.ps1))) -Version v0.4
& ([scriptblock]::Create((irm https://opentaint.org/install.ps1))) -Version v0

Windows (CMD):

:: Latest
curl -fsSL https://opentaint.org/install.cmd -o install.cmd && install.cmd && del install.cmd

:: Exact version, minor line, or major line
curl -fsSL https://opentaint.org/install.cmd -o install.cmd && install.cmd v0.4.5 && del install.cmd
curl -fsSL https://opentaint.org/install.cmd -o install.cmd && install.cmd v0.4 && del install.cmd
curl -fsSL https://opentaint.org/install.cmd -o install.cmd && install.cmd v0 && del install.cmd

Environment variables

Variable	Effect
OPENTAINT_REPOSITORY	Override seqra/opentaint (for forks or mirrors)
OPENTAINT_INSTALL_DIR	Override the install destination
OPENTAINT_FORCE	Set to 1 to install side-by-side with an existing Homebrew install

If opentaint is already installed via Homebrew, the install scripts refuse to run and print the Homebrew upgrade command instead. Set OPENTAINT_FORCE=1 to force a parallel install.

Docker

No local installation required:

docker run --rm \
  -v /path/to/project:/project \
  -v $(pwd):/output \
  ghcr.io/seqra/opentaint:latest \
  opentaint scan --output /output/results.sarif /project

See Docker documentation for advanced usage.

Precompiled Binaries

Each release provides three archive variants:

Variant	Contents	Use case
opentaint-full	Binary + JARs + rules + JRE	Recommended — everything included, no additional downloads
opentaint	Binary + JARs + rules	Use your own JRE (Java 17+)
opentaint-cli	Binary only	Minimal install; run opentaint pull to download components

Download opentaint-full for your platform (recommended):

Platform	Download
Linux x64	opentaint-full_linux_amd64.tar.gz
Linux ARM64	opentaint-full_linux_arm64.tar.gz
macOS x64	opentaint-full_darwin_amd64.tar.gz
macOS ARM64 (Apple Silicon)	opentaint-full_darwin_arm64.tar.gz
Windows x64	opentaint-full_windows_amd64.zip
Windows ARM64	opentaint-full_windows_arm64.zip

The opentaint-full archives include bundled JARs, rules, and JRE — no additional downloads needed. Replace opentaint-full with opentaint or opentaint-cli in the URLs above for other variants.

Linux/macOS Installation

Use the install script (recommended) or download and extract manually:

# Install script (recommended — handles placement automatically)
curl -fsSL https://opentaint.org/install.sh | bash

# Or for opentaint-cli variant (binary only):
curl -L https://github.com/seqra/opentaint/releases/latest/download/opentaint-cli_linux_amd64.tar.gz | tar xz
sudo mv opentaint /usr/local/bin/

Replace the URL with your platform's download link from the table above.

macOS Security Note

If you see "opentaint" cannot be opened because the developer cannot be verified, go to System Preferences > Security & Privacy and click Open anyway.

Updating

opentaint update

For package manager installations, opentaint update will show the appropriate command (e.g., brew upgrade --cask opentaint for Homebrew, or npm install -g @seqra/opentaint@latest for npm).

Cleaning Up

Remove stale downloaded artifacts:

opentaint prune              # Interactive confirmation
opentaint prune --dry-run    # See what would be deleted
opentaint prune --yes        # Skip confirmation

Build from Source

git clone https://github.com/seqra/opentaint.git
cd opentaint
go build