Skip to content

0.22.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Sep 10:59
· 68 commits to main since this release
v0.22.2
e78b45e

First run

These builds are not signed with a paid Apple or Microsoft certificate, so
both systems stop you the first time. Neither message is a finding about
this file — every installer's SHA-256 is under Checksums.

macOS — you will be told the app is "damaged". It is not. macOS shows
that exact wording for any app it cannot trace to a paid Apple Developer ID,
and the dialog's only obvious button moves it to the Trash. Do not use it.
On macOS 15 (Sequoia) and later there is no right-click → Open bypass; Apple
removed it. Drag the app to Applications, then either open
System Settings → Privacy & Security and click Open Anyway, or run:

/usr/bin/xattr -dr com.apple.quarantine /Applications/ShellPilot.app

That clears the download flag and nothing else — the app's signature stays
intact and verifiable with codesign --verify --strict --deep. The full
path is deliberate: a Homebrew or pip xattr earlier on your PATH may not
support -r.

Windows — SmartScreen will warn. Choose More info → Run anyway.

Downloads

Windows

File Notes
ShellPilot-0.22.2-setup.exe Installer with desktop and Start-menu shortcuts. Pick this one if unsure.
ShellPilot-0.22.2-portable.exe Single file, no install, keeps its data beside the .exe — runs from a USB stick

macOS

File Notes
ShellPilot-0.22.2-arm64.dmg Apple Silicon (M1 and later)
ShellPilot-0.22.2-x64.dmg Intel Macs

Linux

File Notes
ShellPilot-0.22.2-x86_64.AppImage Any distribution — chmod +x and run
ShellPilot-0.22.2-amd64.deb Debian and Ubuntu — sudo apt install ./ShellPilot-0.22.2-amd64.deb

Source for the bundled OpenVPN

ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.

Antivirus scan

These builds are unsigned, so every release is scanned before publishing.

Scanner Result
Microsoft Defender (Windows runner) no threats found
ClamAV ClamAV 1.5.3/28116/Mon Sep 7 06:24:32 2026 clean
VirusTotal (70+ engines) per-file reports below

One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.

Checksums

These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.

shasum -a 256 <file>                      # macOS, Linux
certutil -hashfile <file> SHA256          # Windows
File SHA-256
ShellPilot-0.22.2-amd64.deb 1d42ef4600d189dc1956f041f8a2631f14d5baa4673dd25c686b576babed6957
ShellPilot-0.22.2-arm64.dmg 0d747dc4bc246f79e25807eeef7e1d5d0161f1abab53db47a737c8e4eb5c4b3f
ShellPilot-0.22.2-portable.exe 96b267d437adddc3e5d571d063dcd6148cdb63ad71a0f07ba48e3022bb8c3783
ShellPilot-0.22.2-setup.exe 97ffe90af2f86ab911b2dd00f3733f19e1454dfb759880854190989b9295b9a8
ShellPilot-0.22.2-x64.dmg 15bdc42dc4c31556841ffd1f00a8b7f9c5e95d1c60b12f93a329388f3f71ae53
ShellPilot-0.22.2-x86_64.AppImage 61d24655eae75f7742b0ee55c3c0ccfe452b6d287db49c58fdcd829d73568819
openvpn-2.6.22-source.tar.gz e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48

The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.

Full Changelog: v0.22.1...v0.22.2

Assets 15
Loading