Installation
scd-server is distributed as a single self-contained binary — no Node.js required on the target machine. After purchasing a license at securecodebydesign.com, download the binary for your platform from your license portal.
Download the binary
| Platform | File | Step-by-step guide |
|---|---|---|
| macOS | scd-server-macos-x64 | Install on macOS → |
| Linux (x64) | scd-server-linux-x64 | Install on Linux → |
| Windows (x64) | scd-server-win-x64.exe | Install on Windows → |
Follow the guide for your operating system above — each one walks you through download, first launch, and what to expect, step by step.
A native Apple Silicon build is not yet available. scd-server-macos-x64 runs on Apple Silicon via Rosetta 2.
scd-server is an internal tool
scd-server is designed to run inside your own network. The whole point is that your code, findings, and scan data never leave your infrastructure.
Do not expose scd-server to the internet. host: 0.0.0.0 in config.yml makes the server reachable from your internal network — not the public internet. If developers need access from off-site, use a VPN. See Remote access.
Optional: verify the binary
We sign every release. If you want to confirm the binary hasn't been tampered with, here's how — two steps. (Each platform guide links back here.)
Why two steps? minisign verifies that checksums.txt genuinely came from Activemind Solutions AB. sha256sum then verifies that your binary matches that authenticated checksums file.
Step 1 — verify the checksums file with minisign
# Download the public key
curl -s https://dist.securecodebydesign.com/minisign.pub -o minisign.pub
# Download checksums and signature (replace VERSION, e.g. v1.2.0)
wget https://dist.securecodebydesign.com/scd-server/VERSION/checksums.txt
wget https://dist.securecodebydesign.com/scd-server/VERSION/checksums.txt.minisig
# Verify
minisign -Vm checksums.txt -p minisign.pub
# Signature and comment signature verified
Step 2 — verify the binary with sha256sum
sha256sum --check --ignore-missing checksums.txt
# scd-server-linux-x64: OK
A small signing tool (OpenBSD lineage) available in most package managers — brew install minisign, apt install minisign. jedisct1/minisign on GitHub.
Port conflict
If the configured port is already in use, scd-server prints a clear message and exits:
Port 3000 is already in use. Is scd-server already running?
Change port with: ./scd-server --port <port> or set port in config.yml
Next step
Pick your platform — macOS, Linux, or Windows — then continue to First-run setup.