Check what you downloaded.
Every release ships the sha256 of each file, so you can prove your copy is the one we built. This page also carries a bill of materials in both standard formats. Vigilance is one Go program with no outside libraries, so the parts list is short.
latest
Get it
One line installs it. It reads your system, pulls the right file from vigihq.com, and checks the sha256 before it runs.
macOS or Linux
curl -fsSL https://vigihq.com/install.sh | sh
Windows (PowerShell)
irm https://vigihq.com/install.ps1 | iex
Or pick a file by hand from the list below and check it yourself.
The files we shipped
This list is read live from the current release (latest). Every file links to its download. The same list is in SHA256SUMS, so a tool can read it too.
| File | sha256 |
|---|---|
| Loading the current release… | |
Check it yourself
Run one line, then match the number against the file above.
macOS or Linux
shasum -a 256 vigi-linux-amd64
To check every file at once, put SHA256SUMS beside them and run:
shasum -a 256 -c SHA256SUMS
Windows
certutil -hashfile vigi-windows-amd64.exe SHA256
If a number does not match, the file is not ours. Do not run it.
Bill of materials
A software bill of materials lists every third-party part inside a program. Ours is empty. Vigilance is one Go program, built static, with no outside libraries. There is nothing to patch behind our backs and nothing to inherit a bug from.
Both standard formats are here, so your scanner can read either one. Each lists all the binaries with the same hashes as above, for the current release.
One file. Nothing else riding along.
See how that sits next to the tools you already run.