# Install opkssh Enables SSH to be used with OpenID Connect. Version 0.14.0 via Homebrew; verified 2026-04-27. ## Install ```sh sudo av install brew:opkssh ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install opkssh ``` Evidence: local Homebrew formula metadata ### Linux - Debian apt (92%): ```sh sudo apt install golang-github-openpubkey-opkssh-dev ``` Evidence: Debian stable package indexes: golang-github-openpubkey-opkssh-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install opkssh ``` Evidence: Fedora Rawhide package metadata: opkssh from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#opkssh ``` Evidence: nixpkgs package indexes: pkgs/by-name/op/opkssh/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ### Windows - winget (92%): ```sh winget install --id openpubkey.opkssh -e ``` Evidence: Windows Package Manager source index: openpubkey.opkssh from https://cdn.winget.microsoft.com/cache/source.msix ## Package Facts - **Package key:** brew:opkssh - **Package manager:** Homebrew - **Package manager URL:** - **Version:** 0.14.0 - **Source summary:** Enables SSH to be used with OpenID Connect - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-04-27T09:42:52Z - **Generated:** 2026-06-10T07:18:26+00:00 ## Executables - opkssh (cli) - opkssh (alias) ## Build Dependencies - go ## Install Behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-06-10 - Package-manager version: 0.14.0 - Package-manager updated: 2026-04-27 - Local data status: ok - Upstream repository: https://github.com/openpubkey/opkssh - Upstream latest detected: v0.14.0 (current) ## Sicherheitshinweise broad file, network, media, or database tool signal. - **Geiger risk:** blue / medium - broad file, network, media, or database tool signal ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** opkssh - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Debian apt - golang-github-openpubkey-opkssh-dev - 0.4.0-1: normalized package name match | Debian stable package indexes: golang-github-openpubkey-opkssh-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | OpenPubkey SSH tools for OpenID SSH logins (library) | https://github.com/openpubkey/opkssh - Debian apt - opkssh - 0.4.0-1+b2: normalized package name match | Debian stable package indexes: opkssh from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | OpenPubkey SSH tools for OpenID SSH logins (program) | https://github.com/openpubkey/opkssh - Nix - opkssh: normalized package name match | nixpkgs package indexes: pkgs/by-name/op/opkssh/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - dnf - opkssh - 0.14.0-2.fc45: normalized package name match | Fedora Rawhide package metadata: opkssh from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | OpenPubkey SSH | https://github.com/openpubkey/opkssh - dnf - opkssh-doc - 0.14.0-2.fc45: normalized package name match | Fedora Rawhide package metadata: opkssh-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Documentation for OpenPubkey SSH | https://github.com/openpubkey/opkssh - dnf - opkssh-server - 0.14.0-2.fc45: normalized package name match | Fedora Rawhide package metadata: opkssh-server from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Server configuration for OpenPubkey SSH | https://github.com/openpubkey/opkssh - dnf - opkssh-server-selinux - 0.14.0-2.fc45: normalized package name match | Fedora Rawhide package metadata: opkssh-server-selinux from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | SELinux policy for OpenPubkey SSH | https://github.com/openpubkey/opkssh - winget - openpubkey.opkssh: normalized package name match | Windows Package Manager source index: openpubkey.opkssh from https://cdn.winget.microsoft.com/cache/source.msix ## Related Links - [Secret-risk packages](https://www.automicvault.com/de/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/de/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/de/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/de/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [go](https://www.automicvault.com/de/pkg/brew/go/) - Build dependency declared by Homebrew. - [pocket-id](https://www.automicvault.com/de/pkg/brew/pocket-id/) - Shares av.db curated category or tags: authentication, cli, identity-access, oidc, security. - [signmykey](https://www.automicvault.com/de/pkg/brew/signmykey/) - Shares av.db curated category or tags: cli, identity-access, security, ssh. - [granted](https://www.automicvault.com/de/pkg/brew/granted/) - Shares av.db curated category or tags: cli, identity-access, security. - [oauth2_proxy](https://www.automicvault.com/de/pkg/brew/oauth2-proxy/) - Shares av.db curated category or tags: authentication, cli, oidc, security. - [monkeysphere](https://www.automicvault.com/de/pkg/brew/monkeysphere/) - Shares av.db curated category or tags: authentication, cli, security, ssh. - [shibboleth-sp](https://www.automicvault.com/de/pkg/brew/shibboleth-sp/) - Shares av.db curated category or tags: authentication, cli, security, single-sign-on. - [krb5](https://www.automicvault.com/de/pkg/brew/krb5/) - Shares av.db curated category or tags: authentication, cli, security. - [cyrus-sasl](https://www.automicvault.com/de/pkg/brew/cyrus-sasl/) - Shares av.db curated category or tags: authentication, cli, security. - [dexidp](https://www.automicvault.com/de/pkg/brew/dexidp/) - Security-sensitive metadata or terminology overlaps. Shared terms: authentication, cli, connect, identity, openid. ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph