
Install tools from GitHub releases with one command.
ghr is a single static binary that picks the right release asset for your OS and architecture, then verifies it with minisign, sigstore, or a plain checksum — on Mac, Linux, and Windows, and in GitHub Actions.
What it does
- Cross-platform installs: ghr picks the right archive for your OS and CPU architecture automatically — one command works on macOS, Linux, and Windows.
- Verified, not just downloaded: Every install can check GitHub's own SHA-256, a minisign signature, and a sigstore bundle before anything is extracted.
- Built for GitHub Actions: actions/install and actions/download install several tools in one cached step, sharing an HTTP client and auth token.
- Install ghr with ghr: ghr can install itself from its own releases — the same verification path every other tool gets.
- No key files on disk: ghr minisign sign reads its signing key from the environment, so a release job is a single step.
- Fork and self-host: Mirroring or re-publishing a project's releases is a normal GitHub fork — no separate registry to run.