Security and official downloads
Where to get OmniGet, how to check that a file is the real one, and what is signed today.
Where to download
OmniGet is published only in these places:
- This site, getomniget.com
- GitHub releases of tonhowtf/omniget
- winget, as
tonhowtf.OmniGet - AUR, as
omniget-bin(maintained by the community)
Other sites and projects
- The author of OmniGet does not maintain omniget.dev, omniget.net, omniget.in or any other site. They may show outdated versions or features.
- There is another project called OmniGet on winget (
Nexus.OmniGet), a command-line tool with no relation to this app. - OmniGet's code is published only at github.com/tonhowtf/omniget. Copies on GitHub with a download button that leads to another site are not official.
Check a download
Compare the SHA-256 of your file with the one listed for it. If they match, the file is exactly the one the author published.
Windows (PowerShell)
Get-FileHash .\omniget_0.10.1_x64-setup.exe -Algorithm SHA256 macOS
shasum -a 256 omniget_0.10.1_aarch64.dmg Linux
sha256sum omniget_0.10.1_amd64.deb Build provenance (when the release has it)
gh attestation verify omniget_0.10.1_x64-setup.exe --repo tonhowtf/omniget The reference hash lives on GitHub. This site shows the same value for convenience. Hashes come from the SHA-256 that GitHub records for each file of this release.
Checksums for version 0.10.1
Windows
Install steps for Windows-
SHA-256
7b8d9fdac695acba2868f8c350cbf55ea43319e528ed47861467bfef2277c664 -
SHA-256
fc4211fe1c311382e4c835b0c7e20c4f43152e5b5e6dcf39e9f1553ab33df3e4 -
SHA-256
6fad57184e6496e40e6ea9d857d705292f27af166517d7c256fb8c24465b7d8b -
SHA-256
7a3be40ae0e0e8af4f7b9bca4ab74a379c44f0d537d20c75c0c8e9942d848ef2
macOS
Install steps for macOS-
SHA-256
8b9702aaef118921e2597f7d448dd7d4d8c7cda89b07c1b904232073f8b2f6f3 -
SHA-256
c4c6198caa7556c71dc3370fbc1f35940eea3f900339ece0939c567008120ff7 -
SHA-256
b6c475a68fb117886c2f9ac8d744ca2e58bc2b081ec1f560bcb7bc855b0d0bd8 -
SHA-256
8253a1489cf4bb5c889c1304969be55a3384cc663a5c6bec5897b41f9a087257
Linux
Install steps for Linux-
SHA-256
6fb37e12d6c412f3a0780e383833ad97efc0fb6d87b3a173eb36662fa66fa104 -
SHA-256
12509e772183d2f915c5d61caa142998c5c327549b770f88b72ad2f130491e59 -
SHA-256
e26dfca13730ca80f3b2923261a415f0f9858e9691d626a1b3dea64a4c3c050c -
SHA-256
31e86e9ac4eb33911f8a82c956cff3d7cfd5071a92b97960c20979b7b67c1391 -
SHA-256
a67182c1dcf649eb88e1ce1f24bc712cdbc3ccb2e04d9c6ddf9b106c540950bf -
SHA-256
b49f768d7a17815ff18afebbcb21e71353f3021b22761794d207bb9f6fc33ebc -
SHA-256
d8f14272791c0bfb51736a43fbf25ec8f4d297f694ffb73c388892a00d840400
Code signing
- Windows: not signed yet. SmartScreen asks for one confirmation, and Smart App Control blocks the app while it is on.
- macOS: not notarized yet. macOS asks you to allow the app once in Privacy & Security.
- Linux: packages are not signed with a distribution key. Use the checksums above.
Signing for Windows and notarization for macOS are planned. This section changes the day they ship.
Antivirus false positives
Unsigned installers are sometimes flagged. If the SHA-256 matches, report the file to your antivirus vendor as a false positive. Known cases are noted on this page with a date.
Report a vulnerability