Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Manifest upload

A manifest is a dependency lock file attached to a workspace. Once uploaded, OPPSY parses it, identifies every package it declares, and runs a vulnerability scan against the OSV database.

Install oppsy-cli

Pre-built binaries for Linux, macOS, and Windows are available on the GitHub Releases page.

The quickest way to install is with the generated installer script:

curl -fsSL https://github.com/oppsy-dev/oppsy-dev/releases/latest/download/install.sh | sh

This installs oppsy-cli to ~/.local/bin by default. To choose a different directory:

curl -fsSL https://github.com/oppsy-dev/oppsy-dev/releases/latest/download/install.sh | sh -s -- -b /usr/local/bin

From source (requires Go 1.24+)

go install github.com/oppsy-dev/oppsy-dev/oppsy-cli@latest

Publish a manifest

oppsy-cli publish \
  --host-url     http://localhost:3030/api \
  --workspace-id <workspace-id> \
  --lockfile     ./Cargo.lock \
  --name         my-service \
  --tag          v0.1.0