Skip to content

Downloads

Preview software — major work in progress

Vault Prospector is under active development and is published for non-production evaluation only. Direct packages are unsigned, so Windows displays Unknown Publisher. Features and the local database format change between previews. Do not use this to manage production secrets.

All artifacts are published to the public distribution repository. The source repository does not host binaries.

Current release — 0.3.0-preview.3

PackageDownloadChecksumSignature
Windows installer (MSI) — recommended.msi.sha256.sigstore.json
Portable ZIP — no installer required.zip.sha256.sigstore.json
MSIX package.msix.sha256.sigstore.json
Chocolatey package.nupkg.sha256.sigstore.json
WinGet manifests.zip.sha256.sigstore.json
SBOM (SPDX).spdx.json

winget install and choco install are not yet available — the community repositories must approve the package first. See Windows package distribution for status.

Verify before installing

Because the direct packages are unsigned, the checksum and Sigstore bundle are the only integrity evidence. Do not skip this step.

powershell
# Compare against the published .sha256 file
(Get-FileHash .\VaultProspector-0.3.0-preview.3-win-x64.msi -Algorithm SHA256).Hash

Full instructions, including Sigstore bundle verification, are in the release verification guide.

Requirements

  • Windows 10/11 x64.
  • Windows Hello configured — it gates every secret reveal.
  • A Microsoft Entra account with read access to the Key Vaults you want to index.

Older releases

Every previous Preview remains available on the releases page, with matching release notes and the changelog.

Build from source

The source repository builds with PowerShell 7+ and the .NET SDK pinned in global.json:

powershell
pwsh ./scripts/Build.ps1 -Configuration Release
pwsh ./scripts/PackageInstaller.ps1 -Version 0.3.0-preview.3

Preview software. Direct packages are unsigned and display Unknown Publisher — verify the published SHA-256 before installing.