> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://hiddenlayer.ferndocs.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://hiddenlayer.ferndocs.com/_mcp/server.

# Deploy AI Supply Chain Security CLI

Before deploying AI Supply Chain Security, make sure you understand:

* [Resource Requirements](/docs/products/supply-chain/cli/resource_requirements)
* [Hybrid and Disconnected modes](/docs/products/supply-chain/cli/hybrid_disconnected)

> **Select OS**
>
> Select your operating system to view installation instructions.

#### macOS

> **Select Deployment Type**
>
> Select Hybrid or Disconnected mode. See [Hybrid and Disconnected modes](/docs/products/supply-chain/cli/hybrid_disconnected) for more information.

#### Hybrid

1. Export your HiddenLayer information (product license, API key, and API secret). For Hybrid mode, scan results are sent to the HiddenLayer Console.

   * Replace `%username%` with your email used for the registry.
   * Replace `%password%` with your registry license ID.
   * Replace `%CLI_LICENSE%` with the HiddenLayer product license.
   * Replace `%HL_API_KEY` and `%HL_API_SECRET%` with your HiddenLayer API key and secret, generated in the Console.

   ```
   export HIDDENLAYER_USERNAME=%username%
   export HIDDENLAYER_PASSWORD=%password%
   export HL_LICENSE=%CLI_LICENSE%
   export HL_CLIENT_ID=%HL_API_KEY%
   export HL_CLIENT_SECRET=%HL_API_SECRET%
   ```

#### Disconnected

1. Export your HiddenLayer product license. For Disconnected mode, scan results are note sent to the HiddenLayer Console.

   * Replace `%username%` with your email used for the registry.
   * Replace `%password%` with your registry license ID.
   * Replace `%CLI_LICENSE%` with the HiddenLayer product license.

   ```
   export HIDDENLAYER_USERNAME=%username%
   export HIDDENLAYER_PASSWORD=%password%
   export HL_LICENSE=%CLI_LICENSE%
   ```

2) Run the following commands to login to the HiddenLayer images repository.

   ```
   docker login --username=$HIDDENLAYER_USERNAME --password=$HIDDENLAYER_PASSWORD images.hiddenlayer.ai
   ```

3) Use the docker pull command to download the Supply Chain CLI image.

   * Change the Supply Chain CLI version if you want to pull a different Supply Chain version. For example, change `26.4.0` to `26.5.0`.

   ```
   docker pull --platform linux/amd64 images.hiddenlayer.ai/proxy/supply-chain-security/ghcr.io/hiddenlayer-engineering/supply-chain-scanner:26.4.0
   ```

#### Linux

> **Select Deployment Type**
>
> Select Hybrid or Disconnected mode. See [Hybrid and Disconnected modes](/docs/products/supply-chain/cli/hybrid_disconnected) for more information.

#### Hybrid

1. Export your HiddenLayer information (product license, API key, and API secret). For Hybrid mode, scan results are sent to the HiddenLayer Console.

   * Replace `%username%` with your email used for the registry.
   * Replace `%password%` with your registry license ID.
   * Replace `%CLI_LICENSE%` with the HiddenLayer product license.
   * Replace `%HL_API_KEY` and `%HL_API_SECRET%` with your HiddenLayer API key and secret, generated in the Console.

   ```
   export HIDDENLAYER_USERNAME=%username%
   export HIDDENLAYER_PASSWORD=%password%
   export HL_LICENSE=%CLI_LICENSE%
   export HL_CLIENT_ID=%HL_API_KEY%
   export HL_CLIENT_SECRET=%HL_API_SECRET%
   ```

#### Disconnected

1. Export your HiddenLayer product license. For Disconnected mode, scan results are note sent to the HiddenLayer Console.

   * Replace `%username%` with your email used for the registry.
   * Replace `%password%` with your registry license ID.
   * Replace `%CLI_LICENSE%` with the HiddenLayer product license.

   ```
   export HIDDENLAYER_USERNAME=%username%
   export HIDDENLAYER_PASSWORD=%password%
   export HL_LICENSE=%CLI_LICENSE%
   ```

2) Run the following commands to login to the HiddenLayer images repository.

   ```
   docker login --username=$HIDDENLAYER_USERNAME --password=$HIDDENLAYER_PASSWORD images.hiddenlayer.ai
   ```

3) Use the docker pull command to download the Supply Chain CLI image.

   * Change the Supply Chain CLI version if you want to pull a different Supply Chain version. For example, change `26.4.0` to `26.5.0`.

   ```
   docker pull --platform linux/amd64 images.hiddenlayer.ai/proxy/supply-chain-security/ghcr.io/hiddenlayer-engineering/supply-chain-scanner:26.4.0
   ```

#### Windows

> **Select Deployment Type**
>
> Select Hybrid or Disconnected mode. See [Hybrid and Disconnected modes](/docs/products/supply-chain/cli/hybrid_disconnected) for more information.

#### Hybrid

1. Set your HiddenLayer information (product license, API key, and API secret). For Hybrid mode, scan results are sent to the HiddenLayer Console.

   * Replace `%username%` with your email used for the registry.
   * Replace `%password%` with your registry license ID.
   * Replace `%CLI_LICENSE%` with the HiddenLayer product license.
   * Replace `%HL_API_KEY` and `%HL_API_SECRET%` with your HiddenLayer API key and secret, generated in the Console.

   ```
   set HIDDENLAYER_USERNAME=%username%
   set HIDDENLAYER_PASSWORD=%password%
   set HL_LICENSE=%CLI_LICENSE%
   set HL_CLIENT_ID=%HL_API_KEY%
   set HL_CLIENT_SECRET=%HL_API_SECRET%
   ```

#### Disconnected

1. Set your HiddenLayer product license. For Hybrid mode, scan results are sent to the HiddenLayer Console.

   * Replace `%username%` with your email used for the registry.
   * Replace `%password%` with your registry license ID.
   * Replace `%CLI_LICENSE%` with the HiddenLayer product license.

   ```
   set HIDDENLAYER_USERNAME=%username%
   set HIDDENLAYER_PASSWORD=%password%
   set HL_LICENSE=%CLI_LICENSE%
   ```

2) Run the following commands to login to the HiddenLayer images repository.

   ```
   docker login --username=%HIDDENLAYER_USERNAME% --password=%HIDDENLAYER_PASSWORD% images.hiddenlayer.ai
   ```

3) Use the docker pull command to download the Supply Chain CLI image.

   * Change the Supply Chain CLI version if you want to pull a different Supply Chain version. For example, change `26.4.0` to `26.5.0`.

   ```
   docker pull --platform linux/amd64 images.hiddenlayer.ai/proxy/supply-chain-security/ghcr.io/hiddenlayer-engineering/supply-chain-scanner:26.4.0
   ```

> **Supply Chain is Ready to Scan Model Files**
>
> The Supply Chain Enterprise CLI is ready. See [Scan Model Files](/docs/products/supply-chain/cli/run_model_scanner_cli) for instructions on scanning model files.