Download
Binary Archives
Section titled “Binary Archives”Archives are hosted on GitHub Releases (no longer served from this site). Currently only Linux archives are provided (fully statically linked against musl, no runtime dependencies); extracting yields a single secret-guard executable you can put on your PATH. For other platforms, build from source.
Current release: v0.1.0
| Platform | File | Download |
|---|---|---|
| Linux x86_64 | secret-guard-0.1.0-x86_64-linux-musl.tar.gz | Download |
| Linux ARM64 | secret-guard-0.1.0-aarch64-linux-musl.tar.gz | Download |
Checksums:SHA256SUMS
Verifying SHA256
Section titled “Verifying SHA256”Verify the archive after downloading (SHA256SUMS lives in the same GitHub release assets as the archives):
VERSION=0.1.0BASE=https://github.com/luochen1990/secret-guard/releases/download/v${VERSION}curl -sO "$BASE/secret-guard-${VERSION}-x86_64-linux-musl.tar.gz"curl -sO "$BASE/SHA256SUMS"sha256sum -c --ignore-missing SHA256SUMS# secret-guard-0.1.0-x86_64-linux-musl.tar.gz: OKmacOS and Windows
Section titled “macOS and Windows”No macOS / Windows binary archives yet (the packaging pipeline is not ready).
Build from the source repository:
cargo install on macOS; on Windows, prefer the Linux archive inside WSL.
Alternative Installation Methods
Section titled “Alternative Installation Methods”All methods below fetch from the GitHub source repository:
# One-off run:nix run github:luochen1990/secret-guard -- --help
# Or wire up the overlay / nixosModule into your flake# and use pkgs.secret-guard directlyNixOS users should prefer the structured-options deployment; see NixOS Deployment.
# Builds from source, requires rustc >= 1.96:cargo install --git https://github.com/luochen1990/secret-guard# Or after cloning the repository:cargo install --path .nixosModules.secret-guard provides services.secret-guard.* structured options
with file-based credential injection; configuration errors surface at rebuild time.
Full examples in NixOS Deployment.