Deploy Winget applications to Microsoft Intune with a single click.
Skip the manual packaging workflow and deploy Winget apps to Intune in seconds.
- Curated App Catalog - Browse 100+ pre-configured applications ready for Intune deployment
- One-Click Deployment - Deploy apps directly to your Microsoft Intune tenant
- Real-Time Status - Track deployment progress with live updates
- Pre-Configured Detection Rules - Skip the manual configuration
- Multi-Tenant Support - Works with any Microsoft Entra ID tenant
- MSP Mode - Manage multiple client tenants from a single interface
- Audit Trail - Track all deployments across your client base
- Tenant Isolation - Each client's data remains completely separate
- Multiple Database Options - Supabase Cloud, self-hosted Supabase, or SQLite
- Flexible Packaging - GitHub Actions or local Windows packager
- Air-Gapped Support - Run entirely on-premises with no external dependencies
- Full Source Access - Audit, modify, and extend as needed
The fastest way to get started:
git clone https://github.com/ugurkocde/IntuneGet.git
cd IntuneGet
cp .env.example .env.local
# Edit .env.local with your configuration
docker-compose up -dSee the Self-Hosting Guide for detailed instructions.
flowchart TB
subgraph Frontend
A[Next.js App]
end
subgraph Auth
B[Microsoft Entra ID]
end
subgraph Backend
C[Supabase]
D[(PostgreSQL)]
end
subgraph Packaging
E[GitHub Actions]
F[Windows Runner]
G[IntuneWin Tool]
end
subgraph Microsoft
H[Intune API]
end
A -->|MSAL Auth| B
A -->|Real-time Updates| C
C --- D
A -->|Trigger Workflow| E
E --> F
F --> G
G -->|Upload Package| H
A -->|Deploy App| H
| Component | Technology | Purpose |
|---|---|---|
| Frontend | Next.js 14, React, TypeScript | Web application and UI |
| Database | Supabase (PostgreSQL) | App catalog, deployment status, real-time subscriptions |
| Authentication | MSAL | Microsoft Entra ID integration (multi-tenant) |
| Packaging | GitHub Actions | Windows runner for .intunewin file generation |
| Deployment | Intune Graph API | Application deployment to tenants |
IntuneGet is designed for flexibility. Choose the deployment model that fits your organization.
| Option | Best For | Complexity |
|---|---|---|
| Docker Compose | Production self-hosting | Low |
| Vercel | Quick deployment, serverless | Low |
| Full Self-Hosted | Air-gapped environments, maximum control | Medium |
| Option | Description | Use Case |
|---|---|---|
| Supabase Cloud | Managed PostgreSQL with real-time | Fastest setup, hosted version |
| Self-Hosted Supabase | Full Supabase stack on your infrastructure | Enterprise, compliance requirements |
| SQLite | Single-file database | Development, small deployments |
| Option | Description | Use Case |
|---|---|---|
| GitHub Actions | Cloud-based Windows runner | Default, no infrastructure needed |
| Local Packager | npm package for on-premises | Air-gapped, compliance requirements |
See Database Setup and GitHub Actions Setup for configuration details.
IntuneGet is built with security as a core principle.
- Source Code (this repo) - Fully open source, transparent, and auditable
- Workflow Execution - Runs in a private repository to protect tenant information
- Tenant Isolation - Tenant IDs are masked in logs and never visible in public workflow runs
- No Data Storage - IntuneGet does not store your application binaries or tenant credentials
- HMAC-SHA256 Verification - All callbacks are cryptographically signed
- Token Handling - Access tokens are never persisted and expire after use
For organizations with strict compliance requirements:
- Run the local packager on your own Windows infrastructure
- Use self-hosted Supabase or SQLite
- No external network calls required
See SECURITY.md for our complete security policy.
| Category | Technology |
|---|---|
| Frontend | Next.js 14 with App Router |
| Language | TypeScript |
| UI Components | shadcn/ui |
| Styling | Tailwind CSS |
| Database | Supabase (PostgreSQL) |
| Authentication | MSAL (Microsoft Entra ID) |
| State Management | Zustand + TanStack Query |
| Animations | Framer Motion |
| Deployment | Vercel, Docker |
| Document | Description |
|---|---|
| Self-Hosting Guide | Complete guide for self-hosting IntuneGet |
| Azure AD Setup | Configure Microsoft Entra ID app registration |
| GitHub Actions Setup | Set up the packaging pipeline |
| Database Setup | Supabase configuration options |
| Development Guide | Local development setup |
| Traditional Workflow | With IntuneGet |
|---|---|
| Search for installer downloads | Browse curated catalog |
| Download and verify installers | One-click selection |
| Install IntuneWin tool locally | Automated cloud packaging |
| Create .intunewin packages manually | Instant .intunewin generation |
| Upload to Intune portal | Direct deployment to tenant |
| Configure detection rules | Pre-configured settings |
| Repeat for each application | Deploy multiple apps in minutes |
Contributions are welcome. Please read CONTRIBUTING.md before submitting a pull request.
This project is licensed under the GNU Affero General Public License v3.0 (AGPL-3.0).
This license applies to all code in this repository, regardless of when it was committed.
- Self-host for internal business use
- Modify for personal or internal use
- Network service modifications must be open-sourced
Simplify your Intune deployments.