Docs/Installation

Installation

Download the reel binary and start scanning container images in under a minute.

Looking for a specific platform? See all releases for Linux amd64/arm64, macOS Intel/Apple Silicon, and checksums.

Homebrew (macOS)

Terminal

brew install getreeldev/tap/reel

Intel and Apple Silicon. For malware scanning, also install ClamAV: brew install clamav

Download the latest release for Linux x86_64:

Terminal

curl -sL https://github.com/getreeldev/releases/releases/latest/download/reel_linux_amd64.tar.gz | tar xz && sudo mv reel /usr/local/bin/

Scan images directly in your pipeline:

.github/workflows/security.yml

- uses: getreeldev/releases@v1

with:

image: myapp:${{ github.sha }}

See GitHub Action docs for full configuration.

Check that reel is installed and see available capabilities:

Terminal

reel version

reel status

Reel automatically downloads and caches the security tools it needs on first use:

Tool	Used For	Downloaded To
Trivy	SBOM generation, vulnerability scanning	~/.cache/reel/tools/trivy/
ClamAV	Malware detection	~/.cache/reel/tools/clamav/

No manual installation needed. Tools are cached at ~/.cache/reel/ and reused across runs. Virus databases refresh automatically every 24 hours.

For air-gapped environments, use --offline to skip database updates and --cache-dir to point to a pre-populated cache:

Terminal

reel export sbom nginx:latest --offline --cache-dir /path/to/cache