Security and official downloads
Where to get OmniGet, how to check that a file is the real one, and what is signed today.
Where to download
OmniGet is published only in these places:
- This site, getomniget.com
- GitHub releases of tonhowtf/omniget
- winget, as
tonhowtf.OmniGet - AUR, as
omniget-bin(maintained by the community)
Other sites and projects
- The author of OmniGet does not maintain omniget.dev, omniget.net, omniget.in or any other site. They may show outdated versions or features.
- There is another project called OmniGet on winget (
Nexus.OmniGet), a command-line tool with no relation to this app. - OmniGet's code is published only at github.com/tonhowtf/omniget. Copies on GitHub with a download button that leads to another site are not official.
Check a download
Compare the SHA-256 of your file with the one listed for it. If they match, the file is exactly the one the author published.
Windows (PowerShell)
Get-FileHash .\omniget_1.0.0_x64-setup.exe -Algorithm SHA256 macOS
shasum -a 256 omniget_1.0.0_aarch64.dmg Linux
sha256sum omniget_1.0.0_amd64.deb Build provenance (when the release has it)
gh attestation verify omniget_1.0.0_x64-setup.exe --repo tonhowtf/omniget The reference hash lives on GitHub. This site shows the same value for convenience. Hashes come from the SHA256SUMS file of this release.
Checksums for version 1.0.0
Windows
Install steps for Windows-
Installer (.exe)
omniget_1.0.0_x64-setup.exe
SHA-256
e3078b103880cff75644c1a9a833a90387afdb5e81ddeee6cc75c080bc02658e -
Portable (.exe)
omniget_1.0.0_x64-portable.exe
SHA-256
b2ec6797fd2634273b7171c004803609161ee2d2789c246247c1bd82fe89f334 -
Command line
omniget-cli-1.0.0-x86_64-pc-windows-msvc.zip
SHA-256
06bd1f02c8492cbee718fc113f9838b83a866fbfb419d712b30001d9acbe11b0
macOS
Install steps for macOS-
Disk image (.dmg)
omniget_1.0.0_aarch64.dmg
SHA-256
adb2c09e71ad65164976cfa0a7bdf0a1305608d515695caf65cd5a73824f79b3omniget_1.0.0_x64.dmg
SHA-256
e7a6ea174e71237cffba2b029e1b5d60155e727f216360b061a05b7213e1dced -
Command line
omniget-cli-1.0.0-aarch64-apple-darwin.tar.gz
SHA-256
9c76bc50ca21762b647a8b51b3dba829368f3f44cd7d1bc7fc9854a61fbd765comniget-cli-1.0.0-x86_64-apple-darwin.tar.gz
SHA-256
ee96c557651a3441539f87c2a1b94ca4b1e3f397279689bd1a8b43d1f58fc076
Linux
Install steps for Linux-
.deb (Ubuntu, Debian, Mint)
omniget_1.0.0_amd64.deb
SHA-256
93021a0f34c850c90b308e52436d0aaf46c93c6f8055f8c117b2e1c6a738fac5 -
.rpm (Fedora, openSUSE)
omniget-1.0.0-1.x86_64.rpm
SHA-256
16aa793710882e3c6a87f9e770ced806e37381b852cff0a3dcab46cfa36e5d30 -
AppImage (other distributions)
omniget_1.0.0_amd64.AppImage
SHA-256
c1bfec3cc3dbfd4887f13e41c2463918ff10cde0857ec46a7dabddf89092fd70 -
Command line
omniget-cli-1.0.0-x86_64-unknown-linux-gnu.tar.gz
SHA-256
ee24c757397af687163a4c21e27df99146b6aa78d2ca3c64b720e5fffa5e6aae
Code signing
- Windows: not signed yet. SmartScreen asks for one confirmation, and Smart App Control blocks the app while it is on.
- macOS: not notarized yet. macOS asks you to allow the app once in Privacy & Security.
- Linux: packages are not signed with a distribution key. Use the checksums above.
Signing for Windows and notarization for macOS are planned. This section changes the day they ship.
Antivirus false positives
Unsigned installers are sometimes flagged. If the SHA-256 matches, report the file to your antivirus vendor as a false positive. Known cases are noted on this page with a date.
Report a vulnerability