# Github Installation Guide
URL: https://pro.rv-grid.com/guides/installation-github/
Source: src/content/docs/guides/installation-github.mdx
Description: Learn how to install RevoGrid Pro and Enterprise using Github
[Private GitHub Registry](https://docs.github.com/en/packages/working-with-a-github-packages-registry/working-with-the-npm-registry)

  1.	Ensure you have access to the GitHub repository.
  2.	Authenticate your npm client with GitHub by creating a .npmrc file in your project directory or user home directory with the following content:

```json
@revolist:registry=https://npm.pkg.github.com/
//npm.pkg.github.com/:_authToken=YOUR_PERSONAL_ACCESS_TOKEN
```

3. Replace `YOUR_PERSONAL_ACCESS_TOKEN` with a GitHub token that has `read:packages` and repo permissions.
4.  **Install the packages**. Run the following commands to install the latest versions from the private package registry:

  ```bash
  npm install @revolist/revogrid-pro@latest
  npm install @revolist/revogrid-enterprise@latest
  ```

For additional guidance on installing from GitHub’s private registry, please refer to the [official GitHub Packages documentation](https://docs.github.com/en/packages/working-with-a-github-packages-registry/working-with-the-npm-registry).

To jump start your project with all major frameworks, check out our [Framework Boilerplates](https://github.com/revolist/revogrid-pro-boilerplate.git).

## Supply Chain Metadata

RevoGrid Pro and Enterprise releases include SBOM files and Sigstore release signatures.

- SBOM files are generated in SPDX JSON and CycloneDX JSON formats.
- Package tarballs are signed with Sigstore Cosign keyless signing in the release workflow.
- The signed tarball is the same tarball published to GitHub Packages.

For verification commands and related policy links, see [Security and Supply Chain](/legal/security).
