Rendlio Sheets ships as a .NET global tool, a container image, and self-contained archives for four platforms — same engine, same bytes out. Every release carries a cosign signature, SHA-256 checksums, and a software bill of materials.
No Office, no LibreOffice, no service accounts. One tool, one image, or one archive — and a licence file next to it.
The quickest path if a .NET 10 SDK is already on the machine. Installs the rendlio
command onto your PATH; updates come through the same channel.
$ dotnet tool install -g Rendlio.Sheets.Tool $ dotnet tool update -g Rendlio.Sheets.Tool For CI runners and container platforms — no .NET on the host, nothing else to provision. Mount a working directory and convert; the same image runs on x64 and ARM64.
$ docker pull ghcr.io/rendlio/sheets:latest $ docker run --rm -v "$PWD:/work" ghcr.io/rendlio/sheets sheets convert /work/Book1.xlsx -o /work/Book1.pdf --report /work/report.json
One archive per platform, everything inside — no .NET install, no package manager. Unpack,
drop Rendlio.Sheets.license next to the binary (or in ~/.rendlio/), convert.
$ curl -LO https://github.com/rendlio/rendlio/releases/latest/download/rendlio-win-x64.zip $ curl -LO https://github.com/rendlio/rendlio/releases/latest/download/rendlio-linux-x64.tar.gz $ curl -LO https://github.com/rendlio/rendlio/releases/latest/download/rendlio-linux-arm64.tar.gz $ curl -LO https://github.com/rendlio/rendlio/releases/latest/download/rendlio-osx-arm64.tar.gz win-x64 · linux-x64 · linux-arm64 · osx-arm64 — deterministic output is byte-identical across all four.
Every release is cosign-signed from the public build pipeline and ships a CycloneDX SBOM plus a
SHA256SUMS file. Verify before you run — procurement questionnaires welcome.
$ cosign verify ghcr.io/rendlio/sheets:latest --certificate-identity-regexp 'https://github.com/rendlio/rendlio/' --certificate-oidc-issuer https://token.actions.githubusercontent.com Each archive publishes a matching .sigstore.json bundle in the same release.
$ cosign verify-blob rendlio-linux-x64.tar.gz --bundle rendlio-linux-x64.tar.gz.sigstore.json --certificate-identity-regexp 'https://github.com/rendlio/rendlio/' --certificate-oidc-issuer https://token.actions.githubusercontent.com SHA256SUMS covers every artifact in the release; the CycloneDX SBOM
(rendlio.sbom.json) lists every component in the build.
$ sha256sum -c SHA256SUMS --ignore-missing Archives and the container are self-contained; the dotnet tool needs the .NET 10 SDK.
Signed from the public build pipeline — verifiable against the repository identity.
Every component in the build, machine-readable, attached to the release.
Same workbook, same bytes out — across every platform on this page.
Trial and Community licences are offline files — mint one now and you are ready the day the release lands.