Install the CLI

The untrust CLI is a Python package. It needs Python 3.10 or later on Linux or macOS. One install includes the scanners for every platform: AWS, GCP, Azure and NVIDIA GPU CC.

Get the package

untrust is not published to a public package index. Your untrust contact gives you a wheel file (untrust-<version>-py3-none-any.whl) together with:

• SHA256SUMS, the SHA-256 digest of the wheel;
• sbom.cdx.json, a CycloneDX software bill of materials listing exactly what an install contains.

Each wheel is built reproducibly: the same source commit produces a byte-identical wheel.

Verify the digest, then install into a virtual environment:

shasum -a 256 -c SHA256SUMS
python3 -m venv .venv
. .venv/bin/activate
python -m pip install ./untrust-<version>-py3-none-any.whl
untrust --version

Optional extras

Some features need extra dependencies. Install them with the wheel:

python -m pip install "./untrust-<version>-py3-none-any.whl[collector]"

Extra	Adds
collector	What the hardware-fleet collector needs on a confidential host.
azure	The Azure SDK for live --platform azure-cvm scans. An az login session also works.
zstd	Reading zstd-compressed initrds in untrust buildscan --target vm-snp / vm-tdx on Python versions before 3.14.

Credentials

The scanner uses the credentials already present where it runs. It never asks for, stores or uploads them.

Platform	Credentials
AWS Nitro Enclaves	Your normal AWS credential chain (environment, profile or instance role).
GCP Confidential Space	Google Application Default Credentials.
Azure confidential VMs	The Azure SDK credential chain or an az login session.
NVIDIA GPU CC	None for captured reports: you pass files.

untrust scan --demo needs no credentials at all. Start there:

untrust scan --demo

Next: scan a deployment.

Check the install

untrust --version
untrust list-checks
untrust list-checks --platform sev-snp

untrust list-checks prints every check for a platform with its severity. The same list, with remediation for each check, is in the check reference.