Install

Runs on Linux, macOS, and Windows. Building from source needs Go 1.25 or later.

go install #

go install github.com/nao1215/sqly@latest

Homebrew #

brew install nao1215/tap/sqly

Arch Linux (AUR) #

yay -S sqly-bin

Without an AUR helper:

git clone https://aur.archlinux.org/sqly-bin.git
cd sqly-bin
makepkg -si

aqua #

sqly is in the aqua standard registry:

aqua g -i nao1215/sqly

mise #

mise installs it through the same registry with the aqua backend:

mise use aqua:nao1215/sqly

Prebuilt binaries #

The release page has archives for Linux, macOS, and Windows.

Verify a release #

Every release ships supply-chain metadata:

  • checksums.txt is signed with cosign (keyless), producing checksums.txt.sigstore.json.
  • An SPDX SBOM is attached to each release archive.
  • SLSA build provenance is attested via GitHub OIDC.

Verify the signed checksums, then your archive against them:

cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-identity-regexp 'https://github.com/nao1215/sqly/\.github/workflows/release\.yml@refs/tags/.*' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  checksums.txt
sha256sum --check --ignore-missing checksums.txt

Verify build provenance with the GitHub CLI:

gh attestation verify sqly_<version>_<os>_<arch>.tar.gz --repo nao1215/sqly