_____ ____  _   _ _____ ____ _____  _    __  __ ____
|_   _|  _ \| | | | ____/ ___|_   _|/ \  |  \/  |  _ \
  | | | |_) | | | |  _| \___ \ | | / _ \ | |\/| | |_) |
  | | |  _ <| |_| | |___ ___) || |/ ___ \| |  | |  __/
  |_| |_| \_\\___/|_____|____/ |_/_/   \_\_|  |_|_|


Cryptographic timestamping, from the terminal.


Install (macOS or Linux; amd64 or arm64):

    curl -fsSL https://get.truestamp.com/install.sh | sh

    Installs to /usr/local/bin when that directory exists and is
    writable, otherwise to ~/.local/bin. The installer refuses to run
    as root, so do not pipe it into sudo.

Pin a specific version:

    curl -fsSL https://get.truestamp.com/install.sh | TRUESTAMP_VERSION=vX.Y.Z sh

Install to a custom directory:

    curl -fsSL https://get.truestamp.com/install.sh | TRUESTAMP_INSTALL_DIR=~/bin sh

All installer options:

    curl -fsSL https://get.truestamp.com/install.sh | sh -s -- --help

Upgrade:

    truestamp upgrade

    Once installed, `truestamp upgrade` is install-method aware. For
    install.sh / manual installs it downloads the latest release,
    verifies SHA-256 (and cosign if present), and atomically replaces
    the binary in place. For Homebrew / `go install` it prints the
    matching `brew upgrade --cask` / `go install ...@latest` command
    to run. On Windows it always prints the `go install` command.

    `truestamp upgrade --check` exits 0 up-to-date, 1 if an upgrade is
    available, 2 on network error, 3 if the latest release is a
    pre-release (won't auto-install; pass `--version` to opt in).

    Other commands print a once-per-day "new version available" notice
    on stderr. Suppress with `--no-upgrade-check` or
    `TRUESTAMP_NO_UPGRADE_CHECK=1`, or in CI (auto-detected).

    Re-running `curl ... | sh` also works.


Signature verification (macOS and Linux):

    install.sh verifies the SHA-256 of the downloaded release archive
    against the checksums.txt published with the release. If
    cosign is on your PATH, it additionally verifies the keyless
    Sigstore signature over checksums.txt itself. When cosign is not
    installed this step is skipped silently.

    Install cosign:

        brew install cosign

    Require cosign verification (refuse to install without it):

        curl -fsSL https://get.truestamp.com/install.sh | TRUESTAMP_REQUIRE_COSIGN=1 sh


Other install channels:

    Homebrew    brew install --cask truestamp/tap/truestamp-cli   (macOS)
    Go install  go install github.com/truestamp/truestamp-cli/cmd/truestamp@latest
    Windows     go install (above), or download the .zip from Releases

    The Homebrew cask is not yet signed with an Apple Developer ID, so
    macOS Gatekeeper blocks the first run. Clear the quarantine flag
    once per install or upgrade (install.sh does this for you):

        xattr -cr "$(brew --caskroom)/truestamp-cli"


Source      github.com/truestamp/truestamp-cli
Releases    github.com/truestamp/truestamp-cli/releases
Script      get.truestamp.com/install.sh
License     MIT


Copyright (c) 2019-2026 Truestamp, Inc. All rights reserved.