Releases & Downloads

All Stategraph releases are published on GitHub. Visit the releases page for the latest version.

CLI Installation

Quick install (Linux and macOS)

The fastest way to install the Stategraph CLI. The script detects your platform, downloads the latest release, and installs it to /usr/local/bin:

curl -fsSL https://get.stategraph.com/install.sh | sh

Pass --no-sudo to install without sudo (for example, to a directory you own):

curl -fsSL https://get.stategraph.com/install.sh | sh -s -- --no-sudo

Homebrew (macOS)

brew tap stategraph/stategraph
brew install stategraph

Upgrade with brew upgrade stategraph.

Debian / Ubuntu (apt)

curl -fsSL https://stategraph.github.io/releases/apt/KEY.gpg | sudo gpg --dearmor -o /usr/share/keyrings/stategraph-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/stategraph-archive-keyring.gpg] https://stategraph.github.io/releases/apt stable main" | sudo tee /etc/apt/sources.list.d/stategraph.list > /dev/null
sudo apt-get update && sudo apt-get install -y stategraph

RHEL / Fedora / CentOS (yum)

sudo rpm --import https://stategraph.github.io/releases/yum/KEY.gpg
sudo tee /etc/yum.repos.d/stategraph.repo <<'EOF'
[stategraph]
name=Stategraph
baseurl=https://stategraph.github.io/releases/yum/$basearch
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://stategraph.github.io/releases/yum/KEY.gpg
EOF
sudo yum install -y stategraph

The apt and yum repositories always resolve to the latest release, so apt-get upgrade / yum update keeps the CLI current.

Docker Images

The CLI image is publicly available on GitHub Container Registry. The server image is distributed privately — see Server below for access.

Server

The server image includes the API backend and web console. It's distributed privately so we can make sure every team has the support and onboarding they need to run Stategraph well.

Get in touch through our contact page and we'll get you set up with access and aligned on your deployment.

Once you have access, the server image powers:

• Docker Compose deployments
• Kubernetes deployments

CLI

The CLI image contains the stategraph command-line tool.

docker pull ghcr.io/stategraph/stategraph:<version>

See CLI documentation for usage.

Verifying an image

Release images are signed with Sigstore keyless signing, and carry a SLSA build provenance attestation. The signing certificate records the repository, the release workflow, and the commit the image was built from.

Check the signature with cosign:

cosign verify \
  --certificate-identity-regexp '^https://github\.com/stategraph/mono/\.github/workflows/release\.yml@' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ghcr.io/stategraph/stategraph:<version>

Read the provenance with the same identity:

cosign verify-attestation --type slsaprovenance1 \
  --certificate-identity-regexp '^https://github\.com/stategraph/mono/\.github/workflows/release\.yml@' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ghcr.io/stategraph/stategraph:<version> \
  | jq -r .payload | base64 -d | jq .predicate

The predicate names the builder, the source commit, and the workflow run that produced the image.

The latest tag resolves to the same digest as the version it points at, so checking either tag checks the same signature. The server image verifies the same way once you have access to it.

The per-arch tags <version>-amd64 and <version>-arm64 carry their own signature and provenance, and both commands above accept them with the same identity flags.

Tags published before Stategraph started signing images have no signature, and cosign verify fails for them.

Binary Downloads

For air-gapped environments or manual installs, native binaries are available for direct download from the releases page. For most users the quick install script is simpler.

Installation

This resolves the latest release automatically, so there is no version to keep up to date:

# Resolve the latest version
VERSION=$(curl -s https://api.github.com/repos/stategraph/releases/releases/latest \
  | grep -o '"tag_name": *"[^"]*"' | cut -d'"' -f4)

# Download and extract (Linux x86_64 shown — swap the suffix for your platform)
curl -LO https://github.com/stategraph/releases/releases/download/$VERSION/stategraph-$VERSION-linux-amd64.tar.gz
tar xzf stategraph-$VERSION-linux-amd64.tar.gz

# Move to PATH and verify
sudo mv stategraph /usr/local/bin/
stategraph --help

API Schema

Each release includes the OpenAPI schema (api.json) as a downloadable artifact. This can be used for code generation, API client creation, or integration with tools that consume OpenAPI specifications.

The schema is also available at runtime via the GET /api/v1/openapi endpoint.

Version Scheme

Stategraph follows semantic versioning:

• Major (X.0.0) - Breaking changes
• Minor (0.X.0) - New features, backwards compatible
• Patch (0.0.X) - Bug fixes

Release Notes

See the GitHub releases page for detailed release notes and changelogs.