ghr logo

Install tools from GitHub releases with one command.

ghr is a single static binary that picks the right release asset for your OS and architecture, then verifies it with minisign, sigstore, or a plain checksum — on Mac, Linux, and Windows, and in GitHub Actions.

What it does

  • Cross-platform installs: ghr picks the right archive for your OS and CPU architecture automatically — one command works on macOS, Linux, and Windows.
  • Verified, not just downloaded: Every install can check GitHub's own SHA-256, a minisign signature, and a sigstore bundle before anything is extracted.
  • Built for GitHub Actions: actions/install and actions/download install several tools in one cached step, sharing an HTTP client and auth token.
  • Install ghr with ghr: ghr can install itself from its own releases — the same verification path every other tool gets.
  • No key files on disk: ghr minisign sign reads its signing key from the environment, so a release job is a single step.
  • Fork and self-host: Mirroring or re-publishing a project's releases is a normal GitHub fork — no separate registry to run.