Security and official downloads

Where to get OmniGet, how to check that a file is the real one, and what is signed today.

Check a download

Compare the SHA-256 of your file with the one listed for it. If they match, the file is exactly the one the author published.

Windows (PowerShell)

Get-FileHash .\omniget_1.0.0_x64-setup.exe -Algorithm SHA256

macOS

shasum -a 256 omniget_1.0.0_aarch64.dmg

Linux

sha256sum omniget_1.0.0_amd64.deb

Build provenance (when the release has it)

gh attestation verify omniget_1.0.0_x64-setup.exe --repo tonhowtf/omniget

The reference hash lives on GitHub. This site shows the same value for convenience. Hashes come from the SHA256SUMS file of this release.

Checksums for version 1.0.0

  • Installer (.exe)

    omniget_1.0.0_x64-setup.exe

    SHA-256

    e3078b103880cff75644c1a9a833a90387afdb5e81ddeee6cc75c080bc02658e
  • Portable (.exe)

    omniget_1.0.0_x64-portable.exe

    SHA-256

    b2ec6797fd2634273b7171c004803609161ee2d2789c246247c1bd82fe89f334
  • Command line

    omniget-cli-1.0.0-x86_64-pc-windows-msvc.zip

    SHA-256

    06bd1f02c8492cbee718fc113f9838b83a866fbfb419d712b30001d9acbe11b0
  • omniget_1.0.0_aarch64.dmg

    SHA-256

    adb2c09e71ad65164976cfa0a7bdf0a1305608d515695caf65cd5a73824f79b3

    omniget_1.0.0_x64.dmg

    SHA-256

    e7a6ea174e71237cffba2b029e1b5d60155e727f216360b061a05b7213e1dced
  • omniget-cli-1.0.0-aarch64-apple-darwin.tar.gz

    SHA-256

    9c76bc50ca21762b647a8b51b3dba829368f3f44cd7d1bc7fc9854a61fbd765c

    omniget-cli-1.0.0-x86_64-apple-darwin.tar.gz

    SHA-256

    ee96c557651a3441539f87c2a1b94ca4b1e3f397279689bd1a8b43d1f58fc076
  • .deb (Ubuntu, Debian, Mint)

    omniget_1.0.0_amd64.deb

    SHA-256

    93021a0f34c850c90b308e52436d0aaf46c93c6f8055f8c117b2e1c6a738fac5
  • .rpm (Fedora, openSUSE)

    omniget-1.0.0-1.x86_64.rpm

    SHA-256

    16aa793710882e3c6a87f9e770ced806e37381b852cff0a3dcab46cfa36e5d30
  • AppImage (other distributions)

    omniget_1.0.0_amd64.AppImage

    SHA-256

    c1bfec3cc3dbfd4887f13e41c2463918ff10cde0857ec46a7dabddf89092fd70
  • Command line

    omniget-cli-1.0.0-x86_64-unknown-linux-gnu.tar.gz

    SHA-256

    ee24c757397af687163a4c21e27df99146b6aa78d2ca3c64b720e5fffa5e6aae

Code signing

  • Windows: not signed yet. SmartScreen asks for one confirmation, and Smart App Control blocks the app while it is on.
  • macOS: not notarized yet. macOS asks you to allow the app once in Privacy & Security.
  • Linux: packages are not signed with a distribution key. Use the checksums above.

Signing for Windows and notarization for macOS are planned. This section changes the day they ship.

Antivirus false positives

Unsigned installers are sometimes flagged. If the SHA-256 matches, report the file to your antivirus vendor as a false positive. Known cases are noted on this page with a date.

Report a vulnerability

Loop looks at a shield with a magnifying glass, checking a file.
Chat