64-bit
exeuser scopedesktop.githubusercontent.com · known platform- SHA-256
- 71e939b98b8bdd77b8178362399d5a6a49bc24d8cf7882f4ab1030be3e14d435
- Silent install
- --silent
- Product code
- GitHubDesktop
GitHub Desktop
by GitHub, Inc. · MIT
95/100how this is calculated
Focus on what matters instead of fighting with Git.
Record
- Latest version
- 3.6.3
- Release date
- 14 Jul 2026
- Official page
- https://github.com/apps/desktop
- Package identifier
- GitHub.GitHubDesktop
Official downloads
These URLs are the ones GitHub, Inc. declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
64-bit
wixmachine scopedesktop.githubusercontent.com · known platform- SHA-256
- 62613af0723746130d17e415175a9c312929a06ce232ec34da476912cc2e11c3
- Product code
- {77BE69BD-B847-4AAA-8D06-E6C6DDB4B68A}
ARM64
exeuser scopedesktop.githubusercontent.com · known platform- SHA-256
- 5b79429c8b43a2aa722a82241e3391f8d14f9ec118f2861d9a98180b8914041b
- Silent install
- --silent
- Product code
- GitHubDesktop
ARM64
wixmachine scopedesktop.githubusercontent.com · known platform- SHA-256
- a69c53bcd4bddf02e981dd3efc40b2d6d760adc4282a2dce2300c3db0b2b9e3a
- Product code
- {3128EA02-3D62-4E95-9C0A-9DBE26E7578D}
Verify the file you downloaded
Run this against the file on disk. If the output does not match the hash below, the file is not what GitHub, Inc. published. Delete it.
Windows · PowerShell
Get-FileHash "GitHubDesktopSetup-x64.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "GitHubDesktopSetup-x64.exe"Expected output
71e939b98b8bdd77b8178362399d5a6a49bc24d8cf7882f4ab1030be3e14d435
macOS
- Version on Homebrew
- 3.6.4-beta1-734d8a75
- Download URL
- https://desktop.githubusercontent.com/releases/3.6.4-beta1-734d8a75/GitHubDesktop-arm64.zip
- SHA-256
- eb9c51b5ba9d89c2369627d4c69e42eb5f08191d99a83ff098c7734ed0eedefd
- Install with Homebrew
- brew install --cask github@beta
How we scored this 95 out of 100
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 4 of 4 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 4 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 29.8 / 35 |
| Served over HTTPS | 4 of 4 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | MITA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Version history70 on record
Every version with a published manifest, newest first. Useful when you need an older build for compatibility.
- Beta
- 3.6.3
- 3.6.2
- 3.6.1
- 3.6.0
- 3.5.12
- 3.5.11
- 3.5.10
- 3.5.9
- 3.5.8
- 3.5.7
- 3.5.6
- 3.5.5
- 3.5.4
- 3.5.3
- 3.5.2
- 3.5.1
- 3.5.0
- 3.4.21
- 3.4.20
- 3.4.19
- 3.4.18
- 3.4.17
- 3.4.16
- 3.4.15
- 3.4.14
- 3.4.13
- 3.4.12
- 3.4.9
- 3.4.8
- 3.4.7
- 3.4.6
- 3.4.5
- 3.4.4
- 3.4.3
- 3.4.2
- 3.4.1
- 3.4.0
- 3.3.18
- 3.3.17
- 3.3.14
- 3.3.13
- 3.3.12
- 3.3.11
- 3.3.9
- 3.3.8
- 3.3.5
- 3.3.4
- 3.3.3
- 3.3.2
- 3.3.1
- 3.2.9
- 3.2.8
- 3.2.7
- 3.2.6
- 3.2.4
- 3.2.3
- 3.2.2
- 3.2.0
- 3.1.5
- 3.1.3
- 3.1.2
- 3.1.1
- 3.0.8
- 3.0.7
- 3.0.4
- 3.0.3
- 3.0.2
- 3.0.1
- 3.0.0
Where our data comes from
- macOS cask
- formulae.brew.sh/cask/github@beta