Installation

biga is distributed through GitHub releases. Each release has builds for Linux (x64, arm64, armv7), macOS (one universal binary), Windows (x64, arm64) and FreeBSD (x64, arm64).

Install scriptCopy Anchor Link

curl -fsSL https://raw.githubusercontent.com/biga-sh/cli/main/install.sh | sh

The scripts pick the right build for your OS and CPU and check it against the release's checksums.txt. If cosign is installed they check that file's signature too.

Other waysCopy Anchor Link

An archive. Download the one for your platform from the releases page, unpack it, and put biga on your PATH.

A package. Linux releases also include .deb, .rpm, .apk and Arch packages:

sudo apt install ./biga_1.0.0_amd64.deb

With Go 1.26 or newer:

go install github.com/biga-sh/cli/cmd/biga@latest

Verify a downloadCopy Anchor Link

checksums.txt lists every file in a release and is signed with Sigstore by the release workflow. A valid signature proves the files were built by the repository's CI from the tagged commit.

cosign verify-blob \
  --certificate-identity "https://github.com/biga-sh/cli/.github/workflows/release.yml@refs/tags/v1.0.0" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --bundle checksums.txt.sigstore.json checksums.txt
sha256sum --check --ignore-missing checksums.txt

Or check one file's build provenance with the GitHub CLI:

gh attestation verify biga_1.0.0_linux_amd64.tar.gz --repo biga-sh/cli

Every archive also ships with an SBOM (*.sbom.json) listing its dependencies.