OpenSCA-cli

by Xmirror Securityv3.0.11

Last updated Jul 27, 2026

OpenSCA-cli is a supply-chain security tool for security researchers and developers.

Install with winget

$ winget install --id XmirrorSecurity.OpenSCA-cli --exact --version 3.0.11

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Built by Pckgr

For IT teams

Deploy this app to your whole fleet with Pckgr RMM.

App deployment, patching, and remote support in one place. Push this app to every device you manage, keep it patched automatically, and see new CVEs the moment they land. Works with Intune or fully standalone.

Free for up to 5 devices.

About

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.

Installers · v3.0.11

Architecture	Type	Scope	Install	Download
x64	ZIP archive	-		Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

No known CVEs for OpenSCA-cli.

Coverage is best-effort and depends on a winget package mapping to an NVD CPE entry. Absence here is not a guarantee of safety.

Related apps

System InformerWinsider Seminars & Solutions, Inc.
WinsiderSS.SystemInformerv3.2.25011.2103
System Informer is a free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.
Mullvad VPNMullvad VPN
MullvadVPN.MullvadVPNv2026.3
Mullvad is an open-source commercial virtual private network service based in Sweden.
iDefenderiMonitorSDK
TRUSTSING.iDefender.ENv5.5.3.0
The Infinite Potential Host Intrusion Prevention System (HIPS)
Gpg4winThe Gpg4win Project
GnuPG.Gpg4winv5.0.2
A secure solution for file and email encryption.
S
SBOM ToolMicrosoft
Microsoft.SBOMToolv4.1.5
The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.
Nessus AgentTenable, Inc.
Tenable.NessusAgentv11.2.2.20009
Nessus Agents give you visibility into additional IT assets - even endpoints, and other remote assets that intermittently connect to the internet.

More from Xmirror Security or browse cyclonedx, license-compliance, sbom.

Frequently asked questions

How do I install OpenSCA-cli on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id XmirrorSecurity.OpenSCA-cli --exact --version 3.0.11. winget downloads the installer from Xmirror Security and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install OpenSCA-cli silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id XmirrorSecurity.OpenSCA-cli --exact 3.0.11 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

How do I uninstall OpenSCA-cli via winget?

Run: winget uninstall --id XmirrorSecurity.OpenSCA-cli --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from OpenSCA-cli's Apps & Features entry.

Is OpenSCA-cli free?

OpenSCA-cli is distributed under Apache-2.0. Refer to the publisher (https://opensca.xmirror.cn/) for the full license terms - Wingetly itself does not charge for installation.

Does OpenSCA-cli work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls OpenSCA-cli directly from the publisher.

How do I keep OpenSCA-cli up to date?

Run winget upgrade --id XmirrorSecurity.OpenSCA-cli --exact, or winget upgrade --all to update everything winget tracks. We index 9 versions of OpenSCA-cli from microsoft/winget-pkgs.

Recent versions

3.0.11latest
3.0.10
3.0.9
3.0.8
3.0.7
3.0.4
3.0.3
3.0.2
3.0.1