Download Fendix
Signed binaries, Linux packages, and multi-arch Docker images. Picks the right artifact for your platform automatically.
v3.7.0
Choose your operating system and processor below.
All artifacts for v3.7.0
Linux
macOS
Signatures, certificates and SBOMs
- macOS Apple Silicon (CycloneDX SBOM)
- macOS Apple Silicon (certificate)
- macOS Apple Silicon (signature)
- macOS Apple Silicon (certificate)
- macOS Apple Silicon (provenance)
- macOS Apple Silicon (provenance)
- macOS Apple Silicon (signature)
- macOS Apple Silicon (SPDX SBOM)
- macOS Apple Silicon (certificate)
- macOS Apple Silicon (signature)
Other
Signatures, certificates and SBOMs
Docker
docker pull fendixapp/fendix:3.7.0Multi-arch manifest — picks linux/amd64 or linux/arm64 automatically.
Homebrew
brew tap Fendix-app/fendix && brew trust --formula Fendix-app/fendix/fendix && brew install fendixView the official Fendix Homebrew repository.Verify a downloaded binary
Release binaries use keyless cosign signatures (Sigstore Fulcio + GitHub Actions OIDC). Download the matching .crt and .sig sidecars, then verify the binary:
cosign verify-blob \
--certificate fendix-v3.7.0-linux-amd64.crt \
--signature fendix-v3.7.0-linux-amd64.sig \
--certificate-identity "https://github.com/Fendix-app/Fendix/.github/workflows/release.yml@refs/tags/v3.7.0" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
fendix-v3.7.0-linux-amd64Verify the Docker image
Pin the verified v3.7.0 digest and require the official Fendix organization workflow identity. The same identity must sign the image, CycloneDX SBOM, and SLSA provenance.
IMAGE=docker.io/fendixapp/fendix DIGEST=sha256:0f0a04e520cbb7eda9dd0850f1807e09c3952111bb79bb72f57c3955eb622015 REF="$IMAGE@$DIGEST" IDENTITY='^https://github.com/Fendix-app/Fendix/.github/workflows/release.yml@refs/tags/v3.7.0$' ISSUER='https://token.actions.githubusercontent.com' cosign verify \ --certificate-identity-regexp "$IDENTITY" \ --certificate-oidc-issuer "$ISSUER" \ "$REF" cosign verify-attestation --type cyclonedx \ --certificate-identity-regexp "$IDENTITY" \ --certificate-oidc-issuer "$ISSUER" \ "$REF" cosign verify-attestation --type slsaprovenance1 \ --certificate-identity-regexp "$IDENTITY" \ --certificate-oidc-issuer "$ISSUER" \ "$REF"
Existing users may continue pulling the previous personal GHCR image temporarily. New installations should use fendixapp/fendix. No retirement date has been announced.