The HexSign CLI is a single Go binary called `hexsign`. There are three supported ways to install it: a Homebrew tap (macOS and Linux), a pre-built release archive (every platform), or building from source. Released binaries are zero-config — you log in once and the CLI handles tokens for you after that.
Homebrew (macOS / Linux)
Homebrew is the simplest option on a developer laptop because it gets you onto a stable upgrade path with `brew upgrade`.
brew tap hexsign/tap brew install hexsign hexsign --version
Pre-built release binary
Every release ships static binaries for macOS (Intel and Apple Silicon), Linux (amd64 and arm64), and Windows. Use this option if you can't run Homebrew, or if you want to pin to a specific version in CI.
# macOS Apple Silicon curl -L -o hexsign \ https://github.com/hexsign/hexsign-cli/releases/latest/download/hexsign-darwin-arm64 chmod +x hexsign && mv hexsign /usr/local/bin/ hexsign --version
Build from source
Building from source requires Go 1.22+ and one extra step: the OAuth client ID is injected at build time so distributed binaries don't need any environment variables. Without it, `hexsign login` will fail with a clear error.
git clone https://github.com/hexsign/hexsign-cli cd hexsign-cli make tidy make build HEXSIGN_CLI_CLIENT_ID=<your_client_id> ./bin/hexsign --version
Verify the install
- `hexsign --version` prints the version and the commit SHA the binary was built from.
- `hexsign --help` lists every command group so you can confirm the binary is on `$PATH`.
- `hexsign config show` prints the resolved config — useful to check which API and identity endpoints the binary will talk to.