Credential-Zugriff
Reads Alibaba Cloud access keys, profiles, and environment credentials.
brew
aliyun-cli mit Homebrew, Nix, pacman, zypper, winget, scoop installieren
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für aliyun-cli in AI-Agent-Workflows.
Agent-Sicherheit
Antwort zur Agent-Sicherheit
aliyun-cli controls Alibaba Cloud resources from local credentials.
Änderungen an Remote-Zustand
Can create, delete, and modify cloud resources.
Publish-/Artefakt-Risiko
Can deploy infrastructure and upload artifacts to cloud services.
Empfohlene Kontrolle
Gate mutating aliyun commands and credential access.
Hinweise für Agent-Nutzung
Allow read-only listing; require approval for writes, deletes, and deploys.
Installation
Weitere Installationsbefehle
macOS
Homebrewverifiziert · 100%
brew install aliyun-clilocal Homebrew formula metadata
Linux
Nixverifiziert · 92%
nix profile install nixpkgs#aliyun-clinixpkgs package indexes · pkgs/by-name/al/aliyun-cli/package.nix · Quelle: api.github.com
Arch Linux pacmanverifiziert · 92%
sudo pacman -S aliyun-cliArch Linux sync databases · aliyun-cli · Quelle: geo.mirror.pkgbuild.com
openSUSE zypperverifiziert · 92%
sudo zypper install aliyun-cliopenSUSE Tumbleweed package metadata · aliyun-cli · Quelle: download.opensuse.org
Windows
Windows Package Managerverifiziert · 92%
winget install --id Alibaba.AlibabaCloudCLI -eWindows Package Manager source index · Alibaba.AlibabaCloudCLI · Quelle: cdn.winget.microsoft.com
Scoopverifiziert · 92%
scoop install main/aliyunScoop official bucket manifest trees · bucket/aliyun.json · Quelle: api.github.com
Überblick
Paketzusammenfassung
Universal Command-Line Interface for Alibaba Cloud
Projektlinks
Befehle und Aliase
- aliyun
Verlauf
Projektgeschichte und Nutzung
Alibaba Cloud CLI is Alibaba Cloud's open-source command-line interface for managing Alibaba Cloud resources through OpenAPI.
Projektgeschichte
The public repository begins in git history on 2015-06-30. The current README describes the CLI as a Go tool built on top of Alibaba Cloud OpenAPI and distributed through GitHub releases, platform installers, a one-line installer, and package managers.
The changelog records a v0.1 entry dated 2018-01-11 with a Go refactoring, basic configuration, and automatic endpoint location. Later pre-v3 entries added richer configuration commands, authentication modes, completion, paging, ossutil integration, and v3.0.0 GA refactoring.
Adoptionsgeschichte
The README explicitly supports trying the CLI in Alibaba Cloud Shell before local installation, which gives it both a hosted-cloud and local-terminal path. It documents Homebrew installation, direct downloads for macOS, Linux, and Windows, and links to GitHub releases.
The input package-manager facts show broad downstream packaging: Homebrew, Nix, pacman, Scoop, winget, and zypper.
Wie es verwendet wird
Users normally start with aliyun configure, which writes profile data including credentials, region, output format, and language. The README documents authentication modes including AK, RAM role ARN, ECS RAM role, OIDC, external credential process, CredentialsURI, chainable RAM role ARN, and CloudSSO.
Once configured, the aliyun executable invokes Alibaba Cloud OpenAPI actions and product commands from the terminal, with troubleshooting support tied to RequestID or error messages.
Warum Paket-Nerds sich dafür interessieren
aliyun-cli is the canonical terminal entry point for Alibaba Cloud automation. For package maintainers, it is a multi-platform cloud CLI with real credential storage, release assets, shell completion, and frequent cloud-service surface changes.
Zeitleiste
- 2015: Public Git history begins.
- 2018: Changelog records v0.1 with Go refactoring and basic configuration.
- 2018: v3.0.1 tag exists in repository history.
- 2026: v3.4.2 tag appears in repository history.
Related projects
- Alibaba Cloud OpenAPI: service interface layer used by the CLI.
- ossutil: object-storage toolset integrated according to the changelog.
Quellen
- Git history from https://github.com/aliyun/aliyun-cli.git
- Official README: https://raw.githubusercontent.com/aliyun/aliyun-cli/master/README.md
- Official changelog: https://raw.githubusercontent.com/aliyun/aliyun-cli/master/CHANGELOG.md
- source_facts.package-manager
Sicherheitslage
Risikostufe: orange
infrastructure mutation or orchestration signal.
Risikoklassifikator
orange Risiko · mittel Konfidenz · infrastructure
Warum
- infrastructure mutation or orchestration signal
Signale
- text:cloud
Installationsverhalten
- In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
- Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
- Build-Metadaten listen 1 Build-Abhängigkeiten.
Empfohlene Prüfung
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
~/.aliyun/config.json
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
~/.aliyun/config.json
Executables
Installierte Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
aliyun | cli | globales Executable |
Aktualität
Version und Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Seite generiert2026-07-25
Manager-Version3.4.10
Manager aktualisiert2026-07-24
lokale DatenOK
Upstreamaktuell
neueste erkannte Versionv3.4.10
https://github.com/aliyun/aliyun-cli
- OKEs wurden keine Aktualitätswarnungen generiert.
Installationsmetadaten
Paketmetadaten
| Paketschlüssel | brew:aliyun-cli |
|---|---|
| Version | 3.4.10 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/aliyun-cli |
| Homepage | https://github.com/aliyun/aliyun-cli |
| Repository | https://github.com/aliyun/aliyun-cli |
| Upstream-Dokumentation | https://github.com/aliyun/aliyun-cli |
| Lizenz | Apache-2.0 |
| Quellarchiv | https://github.com/aliyun/aliyun-cli/archive/refs/tags/v3.4.10.tar.gz |
| Zuletzt aktualisiert | 2026-07-24T10:04:58Z |
| Pulse | updated |
| Build-Abhängigkeiten | go |
| Bottle | verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
Details aus der Quelldatenbank
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | aliyun-cli |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Source-Datenbank-Treffer
Andere Paketmanager-Einträge
Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.
Nix95%
aliyun-cli
nix profile install nixpkgs#aliyun-cli- normalized package name match
- Abgeglichen nach: Aliyun Cli
pacman95%
aliyun-cli 3.3.22-1
Alibaba Cloud CLI
https://github.com/aliyun/aliyun-cli
sudo pacman -S aliyun-cli- License: Apache-2.0
- Architecture: x86_64
- 1 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Aliyun Cli
zypper95%
aliyun-cli 3.3.22-1.1
Alibaba Cloud CLI
https://github.com/aliyun/aliyun-cli
sudo zypper install aliyun-cli- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: aliyun-cli
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Aliyun Cli
winget95%
Alibaba.AlibabaCloudCLI
winget install --id Alibaba.AlibabaCloudCLI -e- normalized package name match
- Abgeglichen nach: Aliyun Cli
Scoop92%
main/aliyun
scoop install main/aliyun- installed executable or alias match
- Abgeglichen nach: Aliyun
Quellspur
Aus Repository-Daten generiert
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
Combined YAML source
View the package source record on GitHub.
Verwendete Quellen
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated agent safety answer
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment