Installation

Hulk publishes a platform-specific installer with every CLI release. The installer selects the immutable binary associated with that release and verifies its architecture, SHA-256 digest, and reported version before replacing an existing installation. Windows also requires a valid Authenticode signature.

Linux

Download, optionally inspect, and run the installer with Bash:

curl --proto '=https' --tlsv1.2 -fsSLo install-hulk.sh \
  https://hulk.cyncly-platform.com/linux/latest/install.sh
less install-hulk.sh
bash install-hulk.sh
rm install-hulk.sh

Hulk and hulkls are installed in /usr/local/bin. The installer downloads files as the current user and requests sudo only when the destination requires it.

Use a different writable directory without elevation:

curl --proto '=https' --tlsv1.2 -fsSLo install-hulk.sh \
  https://hulk.cyncly-platform.com/linux/latest/install.sh
HULK_INSTALL_DIR="$HOME/.local/bin" bash install-hulk.sh
rm install-hulk.sh

macOS

Download, optionally inspect, and run the installer with Bash:

curl --proto '=https' --tlsv1.2 -fsSLo install-hulk.sh \
  https://hulk.cyncly-platform.com/mac/latest/install.sh
less install-hulk.sh
bash install-hulk.sh
rm install-hulk.sh

The macOS installer uses the same /usr/local/bin default and only requests sudo when necessary.

Windows

Run the following commands from PowerShell:

$installer = Join-Path $env:TEMP "install-hulk.ps1"
Invoke-WebRequest https://hulk.cyncly-platform.com/windows/latest/install.ps1 -OutFile $installer
Get-Content $installer
& $installer
Remove-Item $installer

Hulk and hulkls are installed in %USERPROFILE%\hulk. The installer adds that directory to the user PATH without replacing existing PATH entries.

Choose another directory or skip the optional language server when needed:

$installer = Join-Path $env:TEMP "install-hulk.ps1"
Invoke-WebRequest https://hulk.cyncly-platform.com/windows/latest/install.ps1 -OutFile $installer
& $installer -InstallDirectory "$env:LOCALAPPDATA\Hulk" -SkipLanguageServer
Remove-Item $installer

On Linux and macOS, set HULK_INSTALL_LSP=false to install only the CLI.

Verify the installation

Hulk requires Bicep CLI 0.35.1 or newer to compile generated secure outputs. It checks bicep on PATH first, then Azure CLI’s installed Bicep binary, and selects the first compatible compiler. Update Bicep on PATH or run az bicep upgrade if neither installation meets the minimum version.

Open a new terminal when the installer added a new PATH entry, then run:

hulk --version
hulk check --help

After installation, hulk update uses the signed stable release channel and leaves the installed executable unchanged if any release or artifact verification fails.