mallcop

Install mallcop

mallcop is a single Go binary. Install it, then schedule mallcop scan yourself (e.g. cron) for continuous monitoring. Findings land in a git repo you control.

One line

Just the binary. No Go or Python needed

Downloads the prebuilt binary for your platform, verifies its checksum, and puts it on your PATH.

curl -fsSL https://mallcop.app/install.sh | sh
  • Linux and macOS (Apple Silicon); installs to /usr/local/bin or ~/.local/bin, no sudo needed
  • A single static binary with the detection rules baked in. No runtime or config file required to run
  • Then run mallcop init to scaffold a store and print your first scan command

Prefer your own tools?

  • Go toolchain: go install github.com/mallcop-app/mallcop/cmd/mallcop@latest
  • Or download a release binary by hand →

Release binary

No Go toolchain required

Download a prebuilt per-platform binary from GitHub Releases, unpack it, and put it on your PATH.

# Pick the tar.gz for your OS/arch from:
https://github.com/mallcop-app/mallcop/releases
  • Verify the download against the release checksums
  • No language runtime to install
  • Then run mallcop init to write your config

Requirements

  • Linux (amd64/arm64) or macOS (Apple Silicon). No Windows binary is published yet
  • git (for the git-native store)

Run it on a schedule

There is no daemon to babysit. Continuous monitoring is mallcop scan on a schedule you set, for example a cron entry that scans your GitHub org every few hours:

mallcop init   # creates ./store and a sample events.jsonl
# crontab -e, e.g. every 6 hours:
0 */6 * * *  cd /path/to/deployment && mallcop scan --connector github --github-org YOUR_ORG --store store
Quick Start Guide →