macOS
Homebrew Caskverified · 100%
brew install --cask mendlocal Homebrew cask metadata
cask / rank 5434
Install mend with Homebrew Cask
Application security scanning CLI. Version 26.10.1 via Homebrew Cask; verified 2026-11-02.
install
Additional install commands
overview
Package summary
Application security scanning CLI
Project links
Commands and aliases
- mend
history
Project history and usage
Mend CLI is Mend.io's command-line application-security scanner. It runs dependency, source-code, and other supported security analyses locally or in CI and can upload findings to the Mend Platform.
Project history
Mend developed the CLI as a unified entry point for software-composition analysis, static application-security testing, and related Mend services. Its release notes document an actively maintained calendar-versioned product, while migration documentation describes consolidation of older Unified Agent workflows into the CLI.
Adoption history
Mend positions the CLI as its automation-oriented interface for application-security scans in developer workstations and CI/CD pipelines. Official migration guidance recommends it as the successor to workflows built around the older Unified Agent.
How it is used
Users authenticate interactively with `mend auth login` or supply `MEND_URL`, `MEND_EMAIL`, `MEND_USER_KEY`, and, when needed, `MEND_ORGANIZATION` in automation. Commands such as `mend dep` run supported scans, while `mend config` manages automatic-update and proxy settings.
Why package nerds care
The package is notable as a self-updating, vendor-distributed security scanner packaged as a Homebrew cask rather than a conventional source-built formula. It exposes several scanning engines through one executable and supports non-interactive environment-variable authentication for CI.
Timeline
- 2024: Official documentation describes Mend CLI migration paths from the Unified Agent.
- 2026-03: Authentication is unified across Mend scan engines.
- 2026-07: The input package record reports release 26.7.1-hf1.
Related projects
- Mend Unified Agent is the legacy scanner addressed by the official migration guide.
- The Mend Platform receives and presents scan results uploaded by the CLI.
Sources
security posture
No protected-tool coverage found yet
No matching local secret-handling manifest was found for mend. Package metadata is still published here so future coverage has a stable package URL.
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
~/.mend
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
mend | binary | Homebrew cask binary | mend |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-11-04
manager version26.10.1
manager updated2026-11-02
local dataok
upstreamnot checked
latest detectednot detected
- infoRelease/tag comparison is only available for GitHub repositories.https://www.mend.io/none confidence
install metadata
Package metadata
| Package key | cask:mend |
|---|---|
| Version | 26.10.1 |
| Package manager | Homebrew Cask |
| Package manager page | https://formulae.brew.sh/cask/mend |
| Homepage | https://www.mend.io/ |
| Upstream docs | https://www.mend.io/ |
| Source archive | https://downloads.mend.io/cli/darwin_arm64/mend |
| Last updated | 2026-11-02T16:22:06Z |
| Pulse | updated |
| SHA-256 | 27baf79e749169954296f4ec4121712af3a822c3c93f967f0cfed951b1fd4a83 |
| Download URL | https://downloads.mend.io/cli/darwin_arm64/mend |
| Bottle | not recorded |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew cask API |
|---|---|
| Tap | homebrew/cask |
| Full Token | mend |
| Names |
|
| Artifacts | |
| Deprecated | no |
| Disabled | no |
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- package relationship graph
- package version freshness
- package-page enrichment
- pkg.so package database