Overview
WinGet is built around the concept of sources - sets of packages that provide the ability to discover and retrieve metadata so the client can act on it. Each source has a unique identifier, type, and configuration that determines how it behaves.Run
winget source list to see all configured sources on your system.Source Types
WinGet supports three primary source types, each with different characteristics and use cases.Microsoft.PreIndexed.Package
The default source type for the WinGet community repository. This source uses a pre-computed SQLite index stored in an MSIX package for optimal performance.This is the type used by the default “winget” source that accesses the Windows Package Manager Community Repository.
- Index stored in
index.msixpackage containingindex.db(SQLite database) - Manifest files available individually on the server
- Supports both web locations (
https://) and file shares (\\server\share)
Microsoft.Rest
A REST-based source type that enables private or custom package repositories using a REST API. Architecture:- Dynamic package queries via REST API
- Custom HTTP headers support (via
--headerparameter) - Authentication support
- Ideal for enterprise scenarios
Microsoft Store (msstore)
The Microsoft Store source provides access to free applications rated “E for Everyone” from the Microsoft Store.Default Sources
WinGet comes with two default sources pre-configured:| Source | Name | Type | Description |
|---|---|---|---|
| WinGet Community | winget | Microsoft.PreIndexed.Package | winget-pkgs repository |
| Microsoft Store | msstore | Store | Free apps from Microsoft Store |
Source Management
Manage sources using thewinget source command.
Add a Source
Add a new package source to WinGet:Only add sources you trust as secure locations. Sources have access to install software on your system.
Update a Source
Force an update to refresh source metadata:Remove a Source
Remove a configured source:Reset Sources
Reset to default configuration (removes all custom sources):Source Configuration
Sources are defined by several key properties:Source Origins
Sources can come from different origins:- Default - Built-in WinGet sources
- User - User-added sources
- GroupPolicy - Configured via Windows Group Policy
- Predefined - System sources (Installed, ARP, MSIX)
Trust Levels
Advanced Features
Custom HTTP Headers (REST Sources)
REST sources support custom HTTP headers for advanced scenarios:The header is sent as the value of the
Windows-Package-Manager HTTP header. Maximum length: 1024 characters.Certificate Pinning
For enhanced security, sources support certificate pinning configuration:Source Priority
Sources have priority values that determine preference when multiple sources contain the same package:Predefined Sources
Beyond user-configured sources, WinGet maintains several predefined sources:Source Information
After opening, sources provide additional runtime information:Next Steps
Packages
Learn about package structure and metadata
Manifests
Understand manifest files and schemas