Releases: ghauri01/ShellPilot
Release list
0.8.0
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.8.0-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.8.0-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.8.0-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.8.0-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.8.0-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.8.0-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.8.0-amd64.deb |
Source for the bundled OpenVPN
ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28110/Tue Sep 1 06:26:54 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.8.0-setup.exeShellPilot-0.8.0-portable.exeShellPilot-0.8.0-x64.dmgShellPilot-0.8.0-arm64.dmgShellPilot-0.8.0-x86_64.AppImageShellPilot-0.8.0-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.8.0-amd64.deb |
16893934456b546f93db9b7e33b793fc7bcb97cddeabd5aeb117f10995ed079a |
ShellPilot-0.8.0-arm64.dmg |
240dac2c2a8b1ccadc680aaecad7f19b4d892199ec677781e2b246e5b34f461d |
ShellPilot-0.8.0-portable.exe |
39406df43bf836b2b9efccac900252ad0bb58e31ba7257f34da95d86296f463f |
ShellPilot-0.8.0-setup.exe |
ac268afb91f997c833078ecd5f80ec65e81c872d44848286b3beacfad763718d |
ShellPilot-0.8.0-x64.dmg |
dcfa31bfcc9bba5988f997d4333d3e4b8e90f29732a253d462387c2b897602e7 |
ShellPilot-0.8.0-x86_64.AppImage |
e156aa6880195de0d3c5e6e5b9495fba2244e966822966f69988b94a5bb48ca1 |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Builds are not notarized — the macOS apps are ad-hoc signed, the Windows
ones unsigned. SmartScreen will warn on first run — choose More info → Run
anyway. On macOS, first run only: right-click the app → Open, or go to
System Settings → Privacy & Security and click Open Anyway. If you would
rather use the Terminal, /usr/bin/xattr -cr /Applications/ShellPilot.app clears
the quarantine flag (spelt with the full path, because a Homebrew or pip xattr
earlier on your PATH may not support -r). Every installer's SHA-256 is
listed under Checksums above, which is the strongest integrity check available
here.
Full Changelog: v0.7.0...v0.8.0
0.7.0
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.7.0-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.7.0-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.7.0-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.7.0-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.7.0-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.7.0-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.7.0-amd64.deb |
Source for the bundled OpenVPN
ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28109/Mon Aug 31 06:24:07 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.7.0-setup.exeShellPilot-0.7.0-portable.exeShellPilot-0.7.0-x64.dmgShellPilot-0.7.0-arm64.dmgShellPilot-0.7.0-x86_64.AppImageShellPilot-0.7.0-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.7.0-amd64.deb |
150911e154e84292e966ff4191bb3ae7afd6e8b7d2248a02048c9c068a6c2c39 |
ShellPilot-0.7.0-arm64.dmg |
1e3302b4b0b0bf221943dcf05fecc62b3a15c36181ae6e8989a9b2446247dc23 |
ShellPilot-0.7.0-portable.exe |
c516569d8065327a61c84b0fadb018d2a2d44483b157e44bac5d40aa506884d3 |
ShellPilot-0.7.0-setup.exe |
4339f78fc4b1ed756e169a281d39c8fc5df07cd235d3d71f3d15b31ba5338c0c |
ShellPilot-0.7.0-x64.dmg |
8fdce41436f502a195d40c3fde528bdda6ce5ebd09841a8c0a2048bc71833df5 |
ShellPilot-0.7.0-x86_64.AppImage |
a2cc9197f30801eea3a2bb2c35253a1d251dd9af1c1c118ec2c00b160bda4e15 |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Builds are not notarized — the macOS apps are ad-hoc signed, the Windows
ones unsigned. SmartScreen will warn on first run — choose More info → Run
anyway. On macOS, first run only: right-click the app → Open, or go to
System Settings → Privacy & Security and click Open Anyway. If you would
rather use the Terminal, /usr/bin/xattr -cr /Applications/ShellPilot.app clears
the quarantine flag (spelt with the full path, because a Homebrew or pip xattr
earlier on your PATH may not support -r). Every installer's SHA-256 is
listed under Checksums above, which is the strongest integrity check available
here.
What's Changed
- Add release channels, update settings and an always-visible version indicator by @ZeeshanSultan in #19
Full Changelog: v0.6.2...v0.7.0
Contributors
Assets 15
0.6.2
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.6.2-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.6.2-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.6.2-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.6.2-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.6.2-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.6.2-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.6.2-amd64.deb |
Source for the bundled OpenVPN
ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28109/Mon Aug 31 06:24:07 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.6.2-setup.exeShellPilot-0.6.2-portable.exeShellPilot-0.6.2-x64.dmgShellPilot-0.6.2-arm64.dmgShellPilot-0.6.2-x86_64.AppImageShellPilot-0.6.2-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.6.2-amd64.deb |
9f3ca1f2224952fcd16829a9512ea5e420d544bb86d21beea8395c8768970fb5 |
ShellPilot-0.6.2-arm64.dmg |
4cfd0dab6117f357e6480c7cf140dd049d7aeb2207fda7280cf3ccf0a0643a04 |
ShellPilot-0.6.2-portable.exe |
333fe93f0054771d2d291aaaca6379bf127057fbc5efdc1d582ca873782cf89b |
ShellPilot-0.6.2-setup.exe |
46674be46cf3c8d1479374f4437b507542a32a6a243f8312fbacc22124311c9e |
ShellPilot-0.6.2-x64.dmg |
3b3991afbc0f31f7ef285c754766d4d5381d7c56d0e00e95e8425161244d1591 |
ShellPilot-0.6.2-x86_64.AppImage |
8de503485725594b90b7b1a9ab418c87bd4dc9a3ad4ba5f8bc52be870d1e621c |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Builds are not notarized — the macOS apps are ad-hoc signed, the Windows
ones unsigned. SmartScreen will warn on first run — choose More info → Run
anyway. On macOS, first run only: right-click the app → Open, or go to
System Settings → Privacy & Security and click Open Anyway. If you would
rather use the Terminal, /usr/bin/xattr -cr /Applications/ShellPilot.app clears
the quarantine flag (spelt with the full path, because a Homebrew or pip xattr
earlier on your PATH may not support -r). Every installer's SHA-256 is
listed under Checksums above, which is the strongest integrity check available
here.
What's Changed
- Release 0.6.2: retry every network step the release depends on by @ZeeshanSultan in #18
Full Changelog: v0.6.1...v0.6.2
Contributors
Assets 15
0.6.1
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.6.1-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.6.1-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.6.1-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.6.1-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.6.1-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.6.1-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.6.1-amd64.deb |
Source for the bundled OpenVPN
ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28109/Mon Aug 31 06:24:07 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.6.1-setup.exeShellPilot-0.6.1-portable.exeShellPilot-0.6.1-x64.dmgShellPilot-0.6.1-arm64.dmgShellPilot-0.6.1-x86_64.AppImageShellPilot-0.6.1-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.6.1-amd64.deb |
5035cdb3498d140fb4662b4a3543539fad4eadcf6bd49e620b0bd39e4e294ef3 |
ShellPilot-0.6.1-arm64.dmg |
16ff1d8a7911a181bb88056d9c38687dd9989b83bf082218bcebc54031ac42a9 |
ShellPilot-0.6.1-portable.exe |
92a67a081f11a27210854f1497d07f26b2c9fe5ac2b63c65ffe38848be581ef0 |
ShellPilot-0.6.1-setup.exe |
8ce61c50b46aca7d3b02b7088b785a94fa0df26a20d5f001fdfe85ed1248ee37 |
ShellPilot-0.6.1-x64.dmg |
8c9de44b8c611d0dacb9108f3b2800f9bc94d2fe9eda63adb25f405c62f541b4 |
ShellPilot-0.6.1-x86_64.AppImage |
2c49e2e36043aa64a7df227f324b15ec3add8e3d9f6f07371489f5ae7a84eb3c |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Builds are not notarized — the macOS apps are ad-hoc signed, the Windows
ones unsigned. SmartScreen will warn on first run — choose More info → Run
anyway. On macOS, first run only: right-click the app → Open, or go to
System Settings → Privacy & Security and click Open Anyway. If you would
rather use the Terminal, /usr/bin/xattr -cr /Applications/ShellPilot.app clears
the quarantine flag (spelt with the full path, because a Homebrew or pip xattr
earlier on your PATH may not support -r). Every installer's SHA-256 is
listed under Checksums above, which is the strongest integrity check available
here.
What's Changed
- Release 0.6.1: vault orphan on cancel, and a test timeout that hid a flake by @ZeeshanSultan in #17
Full Changelog: v0.6.0...v0.6.1
Contributors
Assets 15
0.6.0
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.6.0-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.6.0-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.6.0-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.6.0-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.6.0-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.6.0-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.6.0-amd64.deb |
Source for the bundled OpenVPN
ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28109/Mon Aug 31 06:24:07 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.6.0-setup.exeShellPilot-0.6.0-portable.exeShellPilot-0.6.0-x64.dmgShellPilot-0.6.0-arm64.dmgShellPilot-0.6.0-x86_64.AppImageShellPilot-0.6.0-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.6.0-amd64.deb |
7976e1e92a96d514e3c93ab37a5d5c8fa86c37d822cfe082716b66bda9f0101a |
ShellPilot-0.6.0-arm64.dmg |
027d0839fc6d4e38840faf4b841f05c3e618740c6489a587e4382374c71b60e3 |
ShellPilot-0.6.0-portable.exe |
2e263402885d28657664ec857c2d8b2c2501256024d773bdfaae1538b6576405 |
ShellPilot-0.6.0-setup.exe |
f69f02e11157b7bf4fe3b2e7a6622127ada7ec7ec9d2c9ea8b50c7a9c437a2af |
ShellPilot-0.6.0-x64.dmg |
947fbd6a74c97abcb940bf7d180843ceb9533d2ed678b50ad334604f6052e245 |
ShellPilot-0.6.0-x86_64.AppImage |
8515c037d384549e13b6ffbbc88d1fbde74c98f9851024e6ebe7a50e1e669dcc |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Builds are not notarized — the macOS apps are ad-hoc signed, the Windows
ones unsigned. SmartScreen will warn on first run — choose More info → Run
anyway. On macOS, first run only: right-click the app → Open, or go to
System Settings → Privacy & Security and click Open Anyway. If you would
rather use the Terminal, /usr/bin/xattr -cr /Applications/ShellPilot.app clears
the quarantine flag (spelt with the full path, because a Homebrew or pip xattr
earlier on your PATH may not support -r). Every installer's SHA-256 is
listed under Checksums above, which is the strongest integrity check available
here.
What's Changed
- VPN tunnels: bundle OpenVPN and Wintun, generate WireGuard keys, watch engine CVEs (0.6.0) by @ZeeshanSultan in #15
- Fix the two things that broke the 0.6.0 release build by @ZeeshanSultan in #16
Full Changelog: v0.5.1...v0.6.0
Contributors
Assets 15
0.5.1
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.5.1-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.5.1-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.5.1-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.5.1-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.5.1-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.5.1-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.5.1-amd64.deb |
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28109/Mon Aug 31 06:24:07 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.5.1-setup.exeShellPilot-0.5.1-portable.exeShellPilot-0.5.1-x64.dmgShellPilot-0.5.1-arm64.dmgShellPilot-0.5.1-x86_64.AppImageShellPilot-0.5.1-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.5.1-amd64.deb |
78be69fce63d8908ccaff07539dc57b7807071639f71fc46f26dba30e4de558d |
ShellPilot-0.5.1-arm64.dmg |
398c3d2ce9e2c7ef52a0d36cf011ff26e37dad66c946591fa51609bf0ebf326c |
ShellPilot-0.5.1-portable.exe |
78a282571126f59b12f630ffdcc4e3465e37b295161cc2f62a7cff6092a1fe3f |
ShellPilot-0.5.1-setup.exe |
05346c7d51e93a17bb056f6b61a2eed390f3aee06230c837f012ab97821f2bcb |
ShellPilot-0.5.1-x64.dmg |
bac681bffa9c6d45e2769dc64cccd45cc20474297e3c01a080626ef4855d0b81 |
ShellPilot-0.5.1-x86_64.AppImage |
11ddcc45c1734fe9122a3eae8e3311e3dcfcfdb28923cc9470071c8d3e9f2b61 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Builds are not notarized — the macOS apps are ad-hoc signed, the Windows
ones unsigned. SmartScreen will warn on first run — choose More info → Run
anyway. On macOS, first run only: right-click the app → Open, or go to
System Settings → Privacy & Security and click Open Anyway. If you would
rather use the Terminal, /usr/bin/xattr -cr /Applications/ShellPilot.app clears
the quarantine flag (spelt with the full path, because a Homebrew or pip xattr
earlier on your PATH may not support -r). Every installer's SHA-256 is
listed under Checksums above, which is the strongest integrity check available
here.
Full Changelog: v0.5.0...v0.5.1
0.5.0
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.5.0-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.5.0-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.5.0-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.5.0-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.5.0-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.5.0-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.5.0-amd64.deb |
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28109/Mon Aug 31 06:24:07 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.5.0-setup.exeShellPilot-0.5.0-portable.exeShellPilot-0.5.0-x64.dmgShellPilot-0.5.0-arm64.dmgShellPilot-0.5.0-x86_64.AppImageShellPilot-0.5.0-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.5.0-amd64.deb |
21e1b7cdf7b7b0883bd27e63ec8cef760a8aba86b1691a6753748f57cc98d74a |
ShellPilot-0.5.0-arm64.dmg |
d1652762897304f93b4af38252c2161875828db9748440cef9f17e53fed71893 |
ShellPilot-0.5.0-portable.exe |
f9924f037509cfb3501eb2edc5ee03c3035e47df564799e318f0b072e24fe313 |
ShellPilot-0.5.0-setup.exe |
bd60189754b968f34ea7d39b77bf2e4fc484b56d4370434b956db838513260d6 |
ShellPilot-0.5.0-x64.dmg |
e1f1719780510a98520743b2ba3745fe1e8d7265f0f1950277d47e1ed36056e2 |
ShellPilot-0.5.0-x86_64.AppImage |
db17c3b1c89a2a9dfba43644721da91cd7883ae5762e777bba460f4b9ab18ccf |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Builds are not notarized — the macOS apps are ad-hoc signed, the Windows
ones unsigned. SmartScreen will warn on first run — choose More info → Run
anyway. On macOS, first run only: right-click the app → Open, or go to
System Settings → Privacy & Security and click Open Anyway. If you would
rather use the Terminal, /usr/bin/xattr -cr /Applications/ShellPilot.app clears
the quarantine flag (spelt with the full path, because a Homebrew or pip xattr
earlier on your PATH may not support -r). Every installer's SHA-256 is
listed under Checksums above, which is the strongest integrity check available
here.
Full Changelog: v0.4.4...v0.5.0
0.4.4
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.4.4-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.4.4-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.4.4-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.4.4-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.4.4-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.4.4-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.4.4-amd64.deb |
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28104/Wed Aug 26 06:24:01 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.4.4-setup.exeShellPilot-0.4.4-portable.exeShellPilot-0.4.4-x64.dmgShellPilot-0.4.4-arm64.dmgShellPilot-0.4.4-x86_64.AppImageShellPilot-0.4.4-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.4.4-amd64.deb |
314cfd8dd0c1c8e30a98f2f85ddb117c8f1ab803ee5f0f3dbe9f09196012eb0c |
ShellPilot-0.4.4-arm64.dmg |
e2037ae345d683dd0b1eabd80158984fe576c3a3fe1a94cda038bca43bf0f45d |
ShellPilot-0.4.4-portable.exe |
0398701f5b00c2b68f3cca04ab191b8c44c5fd651ac2958bdbe155cf0d9263c0 |
ShellPilot-0.4.4-setup.exe |
cba8cab8cdf35bd8ec782d184db851ddfc53e0d778f6383380140fc9d076f871 |
ShellPilot-0.4.4-x64.dmg |
bdf32a65179accf1df5bf49f205edd68bb2602837fd1216b94f34ad49cccf6e1 |
ShellPilot-0.4.4-x86_64.AppImage |
4b0c1e886f5c9878103cb40898a5b68ed8bc37e491b61aa16684d3caba17d5b2 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Builds are not notarized — the macOS apps are ad-hoc signed, the Windows
ones unsigned. SmartScreen will warn on first run — choose More info → Run
anyway. On macOS, first run only: right-click the app → Open, or go to
System Settings → Privacy & Security and click Open Anyway. If you would
rather use the Terminal, /usr/bin/xattr -cr /Applications/ShellPilot.app clears
the quarantine flag (spelt with the full path, because a Homebrew or pip xattr
earlier on your PATH may not support -r). Every installer's SHA-256 is
listed under Checksums above, which is the strongest integrity check available
here.
What's Changed
- Make a pending AI approval visible, and recognise hosts OpenSSH already trusts by @ZeeshanSultan in #13
- Release 0.4.4 by @ZeeshanSultan in #14
Full Changelog: v0.4.3...v0.4.4
Contributors
Assets 14
0.4.3
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.4.3-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.4.3-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.4.3-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.4.3-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.4.3-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.4.3-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.4.3-amd64.deb |
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28104/Wed Aug 26 06:24:01 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.4.3-setup.exeShellPilot-0.4.3-portable.exeShellPilot-0.4.3-x64.dmgShellPilot-0.4.3-arm64.dmgShellPilot-0.4.3-x86_64.AppImageShellPilot-0.4.3-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.4.3-amd64.deb |
726cc1361cf5be92ab53474bb225f1738311e329635201fcc7516c85688bcc54 |
ShellPilot-0.4.3-arm64.dmg |
c6aa06a4faa36799a716da13ff7ae8c192053d1de7a4fb6d8ad189232d0c3b0e |
ShellPilot-0.4.3-portable.exe |
aa28fd732459b47413c75b02ea8479bbade7d0f5885f03e0acb10c7ff9b474d3 |
ShellPilot-0.4.3-setup.exe |
ec41f88680a316951958064db1dc3691ed86ae158a590bba107488842297765b |
ShellPilot-0.4.3-x64.dmg |
061e93eb3edebf83d1b456c90051514e22e6cfed70a3e1f45037aa0538d144ba |
ShellPilot-0.4.3-x86_64.AppImage |
890cf1d37c419b6a5d16efeb6f3eef8e5e45cd647e2622e6d6e8e1d97670825c |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Builds are not notarized — the macOS apps are ad-hoc signed, the Windows
ones unsigned. SmartScreen will warn on first run — choose More info → Run
anyway. On macOS, first run only: right-click the app → Open, or go to
System Settings → Privacy & Security and click Open Anyway. If you would
rather use the Terminal, /usr/bin/xattr -cr /Applications/ShellPilot.app clears
the quarantine flag (spelt with the full path, because a Homebrew or pip xattr
earlier on your PATH may not support -r). Every installer's SHA-256 is
listed under Checksums above, which is the strongest integrity check available
here.
What's Changed
- Enable the hardened runtime on macOS builds by @ZeeshanSultan in #11
- Release 0.4.3 by @ZeeshanSultan in #12
Full Changelog: v0.4.2...v0.4.3
Contributors
Assets 14
0.4.2
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.4.2-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.4.2-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.4.2-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.4.2-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.4.2-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.4.2-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.4.2-amd64.deb |
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28104/Wed Aug 26 06:24:01 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.4.2-setup.exeShellPilot-0.4.2-portable.exeShellPilot-0.4.2-x64.dmgShellPilot-0.4.2-arm64.dmgShellPilot-0.4.2-x86_64.AppImageShellPilot-0.4.2-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.4.2-amd64.deb |
3659ac450df22e681d2546c15836d0f707aff89c88e3fb07bff63673d97afc0d |
ShellPilot-0.4.2-arm64.dmg |
6b10aac3b4347562170220cd00e3aab76059961ee97c185e215890bd1ff52cc2 |
ShellPilot-0.4.2-portable.exe |
acb2f60521262b84f525dcd2d1f1ff54398c3ac244343a3ddeb3750a2eefa9fe |
ShellPilot-0.4.2-setup.exe |
6b0eed61ebbed6fcb292f05f0bd2cd5d4ab5b42c77e24ee74bd0535bd53c67bd |
ShellPilot-0.4.2-x64.dmg |
c2557a62a078e6a21c12dd9582d2cd2f0275c5d4f0e4070dd18cf13cd46a4a58 |
ShellPilot-0.4.2-x86_64.AppImage |
12d21711e6aa0c52c0643b96a80ed531353ca2462b7b736a7fb2c31d36e09c0b |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Builds are not notarized — the macOS apps are ad-hoc signed, the Windows
ones unsigned. SmartScreen will warn on first run — choose More info → Run
anyway. On macOS, first run only: right-click the app → Open, or go to
System Settings → Privacy & Security and click Open Anyway. If you would
rather use the Terminal, /usr/bin/xattr -cr /Applications/ShellPilot.app clears
the quarantine flag (spelt with the full path, because a Homebrew or pip xattr
earlier on your PATH may not support -r). Every installer's SHA-256 is
listed under Checksums above, which is the strongest integrity check available
here.
Full Changelog: v0.4.1...v0.4.2