Downloads
Preview software — major work in progress
Vault Prospector is under active development and is published for non-production evaluation only. Direct packages are unsigned, so Windows displays Unknown Publisher. Features and the local database format change between previews. Do not use this to manage production secrets.
All artifacts are published to the public distribution repository. The source repository does not host binaries.
Current release — 0.3.0-preview.3
| Package | Download | Checksum | Signature |
|---|---|---|---|
| Windows installer (MSI) — recommended | .msi | .sha256 | .sigstore.json |
| Portable ZIP — no installer required | .zip | .sha256 | .sigstore.json |
| MSIX package | .msix | .sha256 | .sigstore.json |
| Chocolatey package | .nupkg | .sha256 | .sigstore.json |
| WinGet manifests | .zip | .sha256 | .sigstore.json |
| SBOM (SPDX) | .spdx.json | — | — |
winget install and choco install are not yet available — the community repositories must approve the package first. See Windows package distribution for status.
Verify before installing
Because the direct packages are unsigned, the checksum and Sigstore bundle are the only integrity evidence. Do not skip this step.
# Compare against the published .sha256 file
(Get-FileHash .\VaultProspector-0.3.0-preview.3-win-x64.msi -Algorithm SHA256).HashFull instructions, including Sigstore bundle verification, are in the release verification guide.
Requirements
- Windows 10/11 x64.
- Windows Hello configured — it gates every secret reveal.
- A Microsoft Entra account with read access to the Key Vaults you want to index.
Older releases
Every previous Preview remains available on the releases page, with matching release notes and the changelog.
Build from source
The source repository builds with PowerShell 7+ and the .NET SDK pinned in global.json:
pwsh ./scripts/Build.ps1 -Configuration Release
pwsh ./scripts/PackageInstaller.ps1 -Version 0.3.0-preview.3