Rendlio.Tool
The quickest path if a .NET 10 SDK is already on the machine. Installs the rendlio
command onto your PATH; updates come through the same channel.
$ dotnet tool install -g Rendlio.Tool $ dotnet tool update -g Rendlio.Tool 01Downloads · every channel signed
One engine.
Every channel signed.
Rendlio ships as a .NET global tool, a container image, and self-contained archives for four platforms — same engine, same bytes out. Every release carries a cosign signature, SHA-256 checksums, and a software bill of materials.
02Install · pick your shape
Three channels. Zero ceremony.
No Office, no LibreOffice, no service accounts. One tool, one image, or one archive — and a licence file next to it.
ghcr.io/rendlio/rendlio
For CI runners and container platforms — no .NET on the host, nothing else to provision. Mount a working directory and convert; the same image runs on x64 and ARM64.
$ docker pull ghcr.io/rendlio/rendlio:latest $ docker run --rm -v "$PWD:/work" ghcr.io/rendlio/rendlio convert /work/Book1.xlsx -o /work/Book1.pdf --report /work/report.json Per-platform binaries
One archive per platform, everything inside — no .NET install, no package manager. Unpack,
drop Rendlio.license next to the binary (or in ~/.rendlio/), convert.
$ curl -LO https://github.com/rendlio/rendlio/releases/latest/download/rendlio-win-x64.zip $ curl -LO https://github.com/rendlio/rendlio/releases/latest/download/rendlio-linux-x64.tar.gz $ curl -LO https://github.com/rendlio/rendlio/releases/latest/download/rendlio-linux-arm64.tar.gz $ curl -LO https://github.com/rendlio/rendlio/releases/latest/download/rendlio-osx-arm64.tar.gz win-x64 · linux-x64 · linux-arm64 · osx-arm64 — deterministic output is byte-identical across all four.
03Verify · trust is checkable
Signed releases.
Evidence, not adjectives.
Every release is cosign-signed from the public build pipeline and ships a CycloneDX SBOM plus a
SHA256SUMS file. Verify before you run — procurement questionnaires welcome.
Verify the image
$ cosign verify ghcr.io/rendlio/rendlio:latest --certificate-identity-regexp 'https://github.com/rendlio/rendlio/' --certificate-oidc-issuer https://token.actions.githubusercontent.com Verify an archive
Each archive publishes a matching .sigstore.json bundle in the same release.
$ cosign verify-blob rendlio-linux-x64.tar.gz --bundle rendlio-linux-x64.tar.gz.sigstore.json --certificate-identity-regexp 'https://github.com/rendlio/rendlio/' --certificate-oidc-issuer https://token.actions.githubusercontent.com Checksums and bill of materials
SHA256SUMS covers every artifact in the release; the CycloneDX SBOM
(rendlio.sbom.json) lists every component in the build.
$ sha256sum -c SHA256SUMS --ignore-missing Archives and the container are self-contained; the dotnet tool needs the .NET 10 SDK.
Signed from the public build pipeline — verifiable against the repository identity.
Every component in the build, machine-readable, attached to the release.
Same workbook, same bytes out — across every platform on this page.
Before the binaries
Get your licence file today.
Trial and Community licences are offline files — mint one now and you are ready the day the release lands.