0.24.0
First run
These builds are not signed with a paid Apple or Microsoft certificate, so
both systems stop you the first time. Neither message is a finding about
this file — every installer's SHA-256 is under Checksums.
macOS — you will be told the app is "damaged". It is not. macOS shows
that exact wording for any app it cannot trace to a paid Apple Developer ID,
and the dialog's only obvious button moves it to the Trash. Do not use it.
On macOS 15 (Sequoia) and later there is no right-click → Open bypass; Apple
removed it. Drag the app to Applications, then either open
System Settings → Privacy & Security and click Open Anyway, or run:
/usr/bin/xattr -dr com.apple.quarantine /Applications/ShellPilot.appThat clears the download flag and nothing else — the app's signature stays
intact and verifiable with codesign --verify --strict --deep. The full
path is deliberate: a Homebrew or pip xattr earlier on your PATH may not
support -r.
Windows — SmartScreen will warn. Choose More info → Run anyway.
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.24.0-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.24.0-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.24.0-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.24.0-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.24.0-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.24.0-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.24.0-amd64.deb |
Source for the bundled OpenVPN
ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28116/Mon Sep 7 06:24:32 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.24.0-setup.exeShellPilot-0.24.0-portable.exeShellPilot-0.24.0-x64.dmgShellPilot-0.24.0-arm64.dmgShellPilot-0.24.0-x86_64.AppImageShellPilot-0.24.0-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.24.0-amd64.deb |
51b70def708d48b7740ece2ed3c2544624a1536d02b795a2f6a6169243a9c4a2 |
ShellPilot-0.24.0-arm64.dmg |
d996f7c1cf5a70e43a6eeba7a6c06ba4e02b45a8ca00bfa52b8551c2cb04f729 |
ShellPilot-0.24.0-portable.exe |
6c95996a1a6db689ee3041df9236d963795a8d76a6b03bd9e9fcf0428550e49e |
ShellPilot-0.24.0-setup.exe |
09cde02a65d7a16ec9f0cb652313b69522665e788a2d702554ffe515bdd066e8 |
ShellPilot-0.24.0-x64.dmg |
7ccf92d005cf6bef173c0ef27f181930a5791d944a89a0e2ed8aeedbca832a35 |
ShellPilot-0.24.0-x86_64.AppImage |
3af155ca8f262504de763d914a956e8660ea9abc9fb76094ba0bec1ed474ecd5 |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Full Changelog: v0.23.0...v0.24.0