Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.8.0-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.8.0-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.8.0-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.8.0-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.8.0-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.8.0-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.8.0-amd64.deb |
Source for the bundled OpenVPN
ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28110/Tue Sep 1 06:26:54 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.8.0-setup.exeShellPilot-0.8.0-portable.exeShellPilot-0.8.0-x64.dmgShellPilot-0.8.0-arm64.dmgShellPilot-0.8.0-x86_64.AppImageShellPilot-0.8.0-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.8.0-amd64.deb |
16893934456b546f93db9b7e33b793fc7bcb97cddeabd5aeb117f10995ed079a |
ShellPilot-0.8.0-arm64.dmg |
240dac2c2a8b1ccadc680aaecad7f19b4d892199ec677781e2b246e5b34f461d |
ShellPilot-0.8.0-portable.exe |
39406df43bf836b2b9efccac900252ad0bb58e31ba7257f34da95d86296f463f |
ShellPilot-0.8.0-setup.exe |
ac268afb91f997c833078ecd5f80ec65e81c872d44848286b3beacfad763718d |
ShellPilot-0.8.0-x64.dmg |
dcfa31bfcc9bba5988f997d4333d3e4b8e90f29732a253d462387c2b897602e7 |
ShellPilot-0.8.0-x86_64.AppImage |
e156aa6880195de0d3c5e6e5b9495fba2244e966822966f69988b94a5bb48ca1 |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Builds are not notarized — the macOS apps are ad-hoc signed, the Windows
ones unsigned. SmartScreen will warn on first run — choose More info → Run
anyway. On macOS, first run only: right-click the app → Open, or go to
System Settings → Privacy & Security and click Open Anyway. If you would
rather use the Terminal, /usr/bin/xattr -cr /Applications/ShellPilot.app clears
the quarantine flag (spelt with the full path, because a Homebrew or pip xattr
earlier on your PATH may not support -r). Every installer's SHA-256 is
listed under Checksums above, which is the strongest integrity check available
here.
Full Changelog: v0.7.0...v0.8.0