Install

Supported platforms

• macOS, Apple Silicon and Intel
• Linux, amd64 and arm64

Windows is not supported yet. On Linux, the always-on daemon runs as a systemd user service, so it needs a systemd user session (systemctl --user). On macOS it runs as a LaunchAgent.

Homebrew

Recommended, on macOS or Linux:

brew install boostsecurityio/tap/dazio

Upgrade with:

brew upgrade dazio

On macOS, the upgrade restarts a running daemon onto the new binary for you.

On Linux, the login service still points at the old version’s binary, which the upgrade removes. If you have continuous protection on, point it at the new binary after upgrading:

dazio service install

Install script

Without Homebrew, on macOS or Linux:

/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/boostsecurityio/dazio/HEAD/install.sh)"

The script installs the latest release into ~/.local/bin/dazio:

• It checks the download’s sha256 against the release’s checksums.txt and installs nothing on a mismatch.
• If cosign is installed, it also verifies the signature on checksums.txt and stops if that fails.
• If ~/.local/bin is not on your PATH, it prints the export PATH=… line to add.
• If you have Homebrew, it asks you to confirm before installing, since Homebrew is the recommended route. If Dazio is already installed with Homebrew, it tells you to run brew upgrade dazio and changes nothing.

Two environment variables change what it installs:

To upgrade, run the same command again. It replaces the binary and restarts a running daemon onto it.

mise

With mise:

mise use -g github:boostsecurityio/dazio

A mise upgrade installs the new version without telling the daemon. If you have continuous protection on, run one of these after upgrading.

On macOS, restart the daemon onto the new binary:

dazio service restart

On Linux, the login service still points at the old version’s binary, so point it at the new one:

dazio service install

Next

Quick start runs your first scan.