tsvsheet logo tsvsheet™

Install

The tsvsheet CLI computes plain-text spreadsheets — prebuilt for macOS, Linux, and Windows on every release. Pick your package manager below, or take a bare binary.

$ brew install tsvsheet/tap/tsv

Homebrew — macOS & Linux

The tsvsheet/tap formula is regenerated automatically from each release and pinned by sha256. Recent Homebrew asks you to trust a third-party tap once — before you do, you can see exactly how these releases are built and verified, and inspect the signed build-provenance attestations on GitHub:

$ brew tap tsvsheet/tap
$ brew trust tsvsheet/tap        # once, on Homebrew versions that ask
$ brew install tsv
$ tsv --version

Scoop — Windows

The scoop-bucket manifest is kept current the same way:

> scoop bucket add tsvsheet https://github.com/tsvsheet/scoop-bucket
> scoop install tsv

Linux packages & prebuilt binaries

Every release ships .deb and .rpm packages (amd64, arm64, armv7) and archives for every platform — macOS and Linux tar.gz, Windows zip — from the releases page. With the GitHub CLI the download stays version-agnostic:

$ gh release download --repo tsvsheet/tsvsheet.go --pattern '*linux_amd64.deb'
$ sudo dpkg -i tsv_*_linux_amd64.deb

Prefer building from source? It is an ordinary Go module:

$ go install github.com/tsvsheet/tsvsheet.go/cmd/tsv@latest

Verify what you run

Releases are built from tagged source by GitHub Actions — never on someone's laptop — and every artifact can be checked independently:

  • Checksums. Each release carries a checksums.txt; the Homebrew formulas and Scoop manifests pin those sha256s, so package managers verify downloads for you.
  • Build provenance. Every artifact ships a GitHub build-provenance attestation naming the repository, commit, and workflow that produced it. Verify any download yourself — gh attestation verify <file> --owner tsvsheet — or browse the attestations on GitHub.
  • Scanned before release. The CI gate runs vulnerability scanning (govulncheck) and the full test suite at 100% coverage before anything is tagged; GitHub's dependency, secret, and code scanning run continuously — see the repo's security overview and the org security policy.

This section describes our build and release process as it operates today, for transparency. It is not a warranty, certification, or guarantee of any kind — the software is provided "as is" under the MIT License.