Skip to main content

JSON manifests

The Qwiet CLI downloads binaries to help generate the Code Property Graph (CPG) and the Software Bill Of Materials (SBOM); the specific ones required depend on your application's language. You can verify the hashes of the downloaded binaries using the JSON manifests listed below.

Example: to verify the Qwiet CLI downloaded onto Linux machines, use the link for sl-linux-x64. The JSON downloaded looks similar to the following:

{
  "fileName":    "sl-0.9.1503",
  "version":     "0.9.1503",
  "downloadURL": "https://cdn.shiftleft.io/download/sl-0.9.1503-linux-x64.tar.gz",
  "sha256":      "084...3b48"
}