macOS
Homebrewverifiziert · 100%
brew install kingfisherlocal Homebrew formula metadata
brew
kingfisher mit Homebrew installieren
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für kingfisher in AI-Agent-Workflows.
Installation
Weitere Installationsbefehle
Überblick
Paketzusammenfassung
MongoDB's blazingly fast secret scanning and validation tool
Projektlinks
Befehle und Aliase
- kingfisher
Verlauf
Projektgeschichte und Nutzung
Kingfisher is MongoDB's open source secret scanning and live validation tool, written in Rust for high-throughput scans of repositories, files, archives, cloud storage, collaboration systems, and CI workflows.
Projektgeschichte
MongoDB presented Kingfisher publicly in June 2025 after describing it as a project that began as an internal effort to detect and verify exposed credentials. The project couples fast pattern matching with validation checks so security teams can distinguish inactive-looking findings from active credentials that require urgent rotation or revocation.
The repository history and release stream show a fast-moving post-release project. GitHub releases list Kingfisher v1.12.0, v1.13.0, and v1.14.0 on June 25-26, 2025, and v1.103.0 through v1.105.0 during June 16-29, 2026.
Adoptionsgeschichte
MongoDB's announcement framed Kingfisher as a core part of MongoDB's internal security workflows before its public release. Homebrew packaging made the CLI installable for macOS and Linux users through the same channel many security engineers use for scanners and developer tools.
Wie es verwendet wird
Kingfisher is used to scan source trees, Git history, platform integrations, archives, and storage targets for leaked API keys, tokens, and credentials. Its CLI can emit JSON, SARIF, TOON, and HTML reports, validate supported secrets against provider APIs, revoke selected secret types, and open a local or hosted report viewer.
Warum Paket-Nerds sich dafür interessieren
For package collectors, Kingfisher sits in the modern secret-scanner lineage with Gitleaks, TruffleHog, and Nosey Parker, but its package identity is shaped by Rust, Hyperscan/Vectorscan-style performance work, validation, SARIF output, and a report viewer bundled with the CLI.
Zeitleiste
- 2025-06: MongoDB announced Kingfisher as an open source secret scanner with live validation.
- 2025-06-25: GitHub release v1.12.0 was published.
- 2025-06-26: GitHub releases v1.13.0 and v1.14.0 were published.
- 2026-06-29: GitHub release v1.105.0 was published.
Related projects
- Kingfisher imports and triages reports from Gitleaks and TruffleHog, references Nosey Parker as part of its scanner lineage, and outputs SARIF for integration with code-scanning workflows.
Quellen
- https://api.github.com/repos/mongodb/kingfisher/releases?per_page=100
- https://formulae.brew.sh/formula/kingfisher
- https://github.com/mongodb/kingfisher
- https://github.com/mongodb/kingfisher/releases
- https://www.mongodb.com/company/blog/product-release-announcements/introducing-kingfisher-real-time-secret-detection-validation
Sicherheitslage
Noch keine Protected-Tool-Abdeckung gefunden
Für kingfisher wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.
Installationsverhalten
- In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
- Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
- Build-Metadaten listen 4 Build-Abhängigkeiten.
Empfohlene Prüfung
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
Executables
Installierte Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
kingfisher | cli | globales Executable |
Aktualität
Version und Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Seite generiert2026-07-25
Manager-Version1.109.0
Manager aktualisiert2026-07-25
lokale DatenOK
Upstreamaktuell
neueste erkannte Versionv1.109.0
https://github.com/mongodb/kingfisher
- OKEs wurden keine Aktualitätswarnungen generiert.
Installationsmetadaten
Paketmetadaten
| Paketschlüssel | brew:kingfisher |
|---|---|
| Version | 1.109.0 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/kingfisher |
| Homepage | https://mongodb.github.io/kingfisher/ |
| Repository | https://github.com/mongodb/kingfisher |
| Upstream-Dokumentation | https://github.com/mongodb/kingfisher#readme |
| Lizenz | Apache-2.0 |
| Quellarchiv | https://github.com/mongodb/kingfisher/archive/refs/tags/v1.109.0.tar.gz |
| Zuletzt aktualisiert | 2026-07-25T00:50:34Z |
| Pulse | updated |
| Build-Abhängigkeiten | boost, cmake, pkgconf, rust |
| Von macOS bereitgestellte Bibliotheken | bzip2 |
| Bottle | verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
Details aus der Quelldatenbank
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | kingfisher |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Quellspur
Aus Repository-Daten generiert
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
Combined YAML source
View the package source record on GitHub.
Verwendete Quellen
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated package history
- package relationship graph
- package version freshness
- package-page enrichment