Release binaries
The releases page contains pre-built binaries for macOS, Linux, and Windows. These should work as standalones: just download, unzip, chmod +x, and run.
macOS guards against software downloaded from the internet, so its download comes in the form of a small installer. You can either chmod +x the installer, or invoke it as bash mdq-installer.sh. The installer will chmod +x the binary for you.
(If you're curious: the macOS installer contains the actual binary as a base64 string in a comment, and running the installer will simply read decode string that into a new file mdq.)
These binaries have been built on GitHub's servers. If you trust my code and you trust GitHub, you can trust these binaries. Each of them has been signed using GitHub's artifact attestations, which lets you verify that GitHub built the binary. Using the gh CLI tool (≥ v2.49.0), just run:
gh attestation verify -o yshavit mdq- Specify
-o yshavitliterally; don't substitute your GitHub username. This flag tells GitHub which repo owner the binary was built under. - For the macOS binary, you can verify both the
mdq-installer.shand themdqbinary it generates. - For the Windows binary, specify
mdq.exe, notmdq