Product Downloads

Mend CLI

Note: Mend CLI versions will be available and supported for six months after their release.

Platform

Architecture

Direct Download URL

Linux (Intel)

amd64

Mend CLI for Linux (Intel)

MacOS (Apple Silicon)

arm64

Mend CLI for MacOS (Apple Silicon)

MacOS (Intel)

amd64

Mend CLI for MacOS (Intel)

Windows (Intel)

amd64

Mend CLI for Windows (Intel)

You can also download the standard Mend CLI from the Mend Platform. See Download the Mend CLI via the Mend Platform.

Mend Self-Contained CLI

The self-contained CLI is a larger build compared to the standard CLI. It bundles the scan engines, so it never downloads them at runtime. It still needs internet access to authenticate with Mend.io — it is not air-gapped — and does not update automatically.

Use the standard CLI unless your security policy prevents downloading executables at run time.

Note:

  • Self-contained CLI versions will be available and supported for six months after their release.

  • Self-contained CLI versions follow the same versioning convention as Mend CLI.

Download the Mend CLI via the Mend Platform

Recommended: Download the self-contained CLI from the Mend Platform. The Mend Platform is the only download source for the self-contained SAST CLI, and it also provides the self-contained SCA CLI, so you can get the engine-specific build you need from one place.

  • Log in to the Mend Platform

  • Click your profile in the upper-right corner of the screen and select My Profile

  • Select Mend CLI Downloads

    image-20261006-143646.png
  • Select the desired mode (Standard CLI or Self-Contained CLI), operating system, and architecture.

    image-20261027-151015.png
    For the Self-Contained CLI, select the engine-specific version where available

Note: If your organization uses the closed beta CLI versioning feature, the downloaded version will match the version specified there. Otherwise, the latest available CLI version will be downloaded.

Mend Self-Contained SCA CLI

  • The self-contained SCA CLI can be used for SCA and Container scans.

  • We recommend downloading the self-contained SCA CLI via the Mend Platform (see Download the Mend CLI via the Mend Platform above). The direct download links below remain available as an alternative, for example when you need a specific earlier version.

Mend Self-Contained SAST CLI

The self-contained SAST CLI is available for download via the Mend Platform only. See Download the Mend CLI via the Mend Platform above for instructions.

The Unified Agent

Note: Unified Agent versions (listed here) will be available and supported for a year after their release. To download a version earlier than the latest, you can specify the version number at the end of the URL. Example: https://unified-agent.s3.amazonaws.com/wss-unified-agent-23.11.1.jar

JAR File

SHA256 Checksum

GitHub Repository

Features

wss-unified-agent.jar

SHA256

unified-agent-distribution

Mend SCA Release Notes

Classic Self-Hosted Repo Integrations

Note:

  • Self-Hosted repo integration versions are traditionally released once a month and supported until the first version of the sixth month after their release.
    Example: 26.7.1 rotates out all 26.1.x versions, and so on.

  • To download one of the supported versions, navigate to the relevant integration’s Release Notes page (listed below) and click the desired version.

Artifactory Plugin - Legacy SCA

ZIP Download (Amazon S3)

Features

whitesource-artifactory-plugin-22.11.2.zip

Release Notes

Previous versions of the Artifactory Plugin can be found here.

Note: The Artifactory Plugin versions will be available and supported for a year after their release. 

xModuleAnalyzer (Prioritize) - Legacy SCA

JAR File

Features

xModuleAnalyzer.jar

Align xModuleAnalyzer with latest Unified Agent

Previous versions of the xModuleAnalyzer can be found here.

Note: The xModuleAnalyzer versions will be available and supported for a year after their release.