COMPASS downloads

Pre-built compass binaries, published from each COMPASS release after its security gate passes. Drop the binary in any folder and run it from there.

Install

curl -fsSLo compass https://github.com/crashappsec/compass-releases/releases/latest/download/compass-$(uname -s)-$(uname -m)
chmod +x compass
./compass --help

Pin a version by replacing latest/download with download/vX.Y.Z.

Verify a download

Every binary ships with a .sha256 digest and a Sigstore bundle signed in CI:

shasum -a 256 -c compass-$(uname -s)-$(uname -m).sha256
cosign verify-blob \
  --bundle "compass-$(uname -s)-$(uname -m).sigstore" \
  --certificate-identity-regexp 'https://github.com/crashappsec/compass/.github/workflows/.*@refs/tags/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  "compass-$(uname -s)-$(uname -m)"

Update

Once installed, the binary updates itself:

./compass --update           # asks before applying
./compass --update=auto      # for scripts

Supported platforms

Darwin-arm64, Darwin-x86_64, Linux-x86_64, Linux-aarch64. Linux binaries need glibc 2.38+ (Ubuntu 24.04, Debian 13, RHEL 10 or later).

---

Binaries only — this repository carries no source code.