Description
I would love to get TruffleHog added to the official Microsoft WinGet repository so Windows users can easily install and update it directly from their terminals.
However, we are currently blocked by a limitation on Microsoft's end: WinGet does not currently support extracting .tar.gz files for portable packages. To make TruffleHog available via WinGet, the Windows binaries need to be published as either .zip archives or standalone .exe installers.
Preferred Solution (for now)
Update the release pipeline (e.g., GoReleaser or GitHub Actions) to output .zip archives instead of (or alongside) the .tar.gz files specifically for the Windows builds.
If this release workflow is updated, I would be more than happy to do the legwork to submit the WinGet YAML manifests to the winget-pkgs repository so the community can start using it, or include them in this issue for a maintainer to review and submit. I'm also open to exploring a PR to help update your GitHub Actions workflow to automate this, though ideally, I'd prefer your team handles the workflow logic since you know your build pipeline best!
Additional Context
To give some context on why this request is necessary (and admittedly a bit frustrating):
WinGet has abnormalities in package management. It currently acts more like a glorified install manager than a true package manager. The fact that it still doesn't support .tar.gz for portable packages is an embarrassing gap on Microsoft's part. It essentially forces upstream open-source developers to create bespoke, "snowflake" release formats just to satisfy WinGet's missing features.
While Scoop is great, WinGet is officially backed by Microsoft, ships by default on modern Windows machines, and has a large user base. I wish Microsoft would fix their extraction logic so I didn't have to ask this, but unfortunately, this is where we're at.
References
microsoft/winget-cli#2899
Description
I would love to get TruffleHog added to the official Microsoft WinGet repository so Windows users can easily install and update it directly from their terminals.
However, we are currently blocked by a limitation on Microsoft's end: WinGet does not currently support extracting
.tar.gzfiles for portable packages. To make TruffleHog available via WinGet, the Windows binaries need to be published as either.ziparchives or standalone.exeinstallers.Preferred Solution (for now)
Update the release pipeline (e.g., GoReleaser or GitHub Actions) to output
.ziparchives instead of (or alongside) the.tar.gzfiles specifically for the Windows builds.If this release workflow is updated, I would be more than happy to do the legwork to submit the WinGet YAML manifests to the
winget-pkgsrepository so the community can start using it, or include them in this issue for a maintainer to review and submit. I'm also open to exploring a PR to help update your GitHub Actions workflow to automate this, though ideally, I'd prefer your team handles the workflow logic since you know your build pipeline best!Additional Context
To give some context on why this request is necessary (and admittedly a bit frustrating):
WinGet has abnormalities in package management. It currently acts more like a glorified install manager than a true package manager. The fact that it still doesn't support
.tar.gzfor portable packages is an embarrassing gap on Microsoft's part. It essentially forces upstream open-source developers to create bespoke, "snowflake" release formats just to satisfy WinGet's missing features.While Scoop is great, WinGet is officially backed by Microsoft, ships by default on modern Windows machines, and has a large user base. I wish Microsoft would fix their extraction logic so I didn't have to ask this, but unfortunately, this is where we're at.
References
microsoft/winget-cli#2899