> For the complete documentation index, see [llms.txt](https://docs.sealsecurity.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.sealsecurity.io/legacy-documentation/cli/download-and-installation.md).

# Download and Installation

The CLI is released as open-source on [GitHub](https://github.com/seal-community/cli). Its latest version is available [here](https://github.com/seal-community/cli/releases/tag/latest).

#### Linux:

1. Download the [latest](https://github.com/seal-community/cli/releases/tag/latest) version for Linux.
2. Unzip it and extract the `seal` file. No installation is needed.
3. For ease of use it's recommended to put the `seal` file in the project directory, or add the directory it's in to the `PATH` environment variable.

#### Verifying the Linux download:

Linux releases are signed by Seal Security with [cosign](https://docs.sigstore.dev/cosign/). The zip holds a signature bundle, `seal.sigstore.json`, next to the `seal` file. The signing key is held in AWS KMS and never leaves its hardware security modules. Every signature is also recorded in Sigstore's public transparency log.

To verify a download before running it:

1. [Install cosign](https://docs.sigstore.dev/cosign/system_config/installation/). It is a single binary with no dependencies.
2. Save Seal Security's public key as `seal-cli.pub`, download the latest Linux version, unzip it and verify the `seal` file:

```bash
echo "-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEEYDZPJicyOmWP4o/Ul9joeSUMW3L
L7vSXIFZ7UH01UfYw+jLnwYI3ELErC7aMFeGjGqA+GrACLrytNvWXqU4cQ==
-----END PUBLIC KEY-----" > seal-cli.pub
curl -fsSL https://github.com/seal-community/cli/releases/download/latest/seal-linux-amd64-latest.zip -o seal.zip
unzip seal.zip
cosign verify-blob --key seal-cli.pub --bundle seal.sigstore.json seal
```

cosign prints `Verified OK`. Any other result means the file was not signed by Seal Security, so don't run it.

{% hint style="info" %}
Our [GitHub action](/legacy-documentation/cli/integrating-with-the-ci.md#github-actions) runs this check automatically before running the CLI.
{% endhint %}

#### Mac:

1. Download the [latest](https://github.com/seal-community/cli/releases/tag/latest) version for Mac (it's the `pkg` file).
2. Install the `pkg` file normally.
3. The installation defaults to `/usr/local/bin/seal`.

#### Windows:

{% hint style="info" %}
Due to the rarity of some CI setups, the Windows version of the CLI may have less features than the Linux and Mac versions.
{% endhint %}

1. Download the [latest](https://github.com/seal-community/cli/releases/tag/latest) version for Windows.
2. Unzip it and extract the `seal.exe` file. No installation is needed.
3. For ease of use it's recommended to put the `seal.exe` file in the project directory, or add the directory it's in to the `Path` environment variable.

For instructions on how to incorporate the CLI as part of your CI refer to this [section](/legacy-documentation/cli/integrating-with-the-ci.md).