Agent-Sicherheit

Antwort zur Agent-Sicherheit

pulumi is an infrastructure-as-code CLI that can mutate cloud resources from local state and credentials.

Credential-Zugriff

Reads cloud credentials, Pulumi tokens, stack config, and secret providers.

Änderungen an Remote-Zustand

Can create, update, and destroy cloud infrastructure.

Publish-/Artefakt-Risiko

Can deploy application infrastructure and write stack outputs.

Empfohlene Kontrolle

Gate pulumi up, destroy, refresh with writes, and config secret changes.

Hinweise für Agent-Nutzung

Allow preview only by default; require approval for any state-changing operation.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%

brew install pulumi

local Homebrew formula metadata

MacPortsverifiziert · 94%

sudo port install pulumi

MacPorts ports tree · sysutils/pulumi/Portfile · Quelle: api.github.com

Linux

Alpine Linux apkverifiziert · 92%

sudo apk add pulumi

Alpine Linux edge package indexes · pulumi · Quelle: dl-cdn.alpinelinux.org

Nixverifiziert · 92%

nix profile install nixpkgs#pulumi

nixpkgs package indexes · pkgs/by-name/pu/pulumi/package.nix · Quelle: api.github.com

Arch Linux pacmanverifiziert · 92%

sudo pacman -S pulumi

Arch Linux sync databases · pulumi · Quelle: geo.mirror.pkgbuild.com

Windows

Chocolateyverifiziert · 92%

choco install pulumi

Chocolatey community package catalog · pulumi · Quelle: community.chocolatey.org

Scoopverifiziert · 92%

scoop install main/pulumi

Scoop official bucket manifest trees · bucket/pulumi.json · Quelle: api.github.com

Windows Package Managerverifiziert · 92%

winget install --id Pulumi.Pulumi -e

Windows Package Manager source index · Pulumi.Pulumi · Quelle: cdn.winget.microsoft.com

Überblick

Paketzusammenfassung

Cloud native development platform

Projektlinks

Befehle und Aliase

pulumi
pulumi-language-bun
pulumi-language-dotnet
pulumi-language-go
pulumi-language-hcl
pulumi-language-java
pulumi-language-nodejs
pulumi-language-pcl
pulumi-language-python
pulumi-language-python-exec
pulumi-language-yaml
pulumi-resource-pulumi-nodejs
pulumi-resource-pulumi-python
pulumi-watch

Sicherheitslage

Risikostufe: orange

infrastructure as code tool.

Risikoklassifikator

orange Risiko · hoch Konfidenz · infrastructure

Warum

infrastructure as code tool

Signale

override:pulumi

Installationsverhalten

In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
Build-Metadaten listen 1 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: ./Pulumi.yaml./Pulumi.yml./Pulumi.<stack>.yaml./Pulumi.<stack>.yml
Windows: .\Pulumi.yaml.\Pulumi.yml.\Pulumi.<stack>.yaml.\Pulumi.<stack>.yml

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix: ~/.pulumi/credentials.json

Executables

Installierte Executables

Befehl	Art	Sichtbarkeit
`pulumi`	cli	globales Executable
`pulumi-language-bun`	cli	globales Executable
`pulumi-language-dotnet`	cli	globales Executable
`pulumi-language-go`	cli	globales Executable
`pulumi-language-hcl`	cli	globales Executable
`pulumi-language-java`	cli	globales Executable
`pulumi-language-nodejs`	cli	globales Executable
`pulumi-language-pcl`	cli	globales Executable
`pulumi-language-python`	cli	globales Executable
`pulumi-language-python-exec`	cli	globales Executable
`pulumi-language-yaml`	cli	globales Executable
`pulumi-resource-pulumi-nodejs`	cli	globales Executable
`pulumi-resource-pulumi-python`	cli	globales Executable
`pulumi-watch`	cli	globales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-26

Manager-Version3.254.0

Manager aktualisiert2026-07-24

lokale DatenOK

Upstreamnot checked

neueste erkannte Versionnicht erkannt

https://github.com/pulumi/pulumi

InfoNo cached GitHub release or tag data was available.https://github.com/pulumi/puluminone Konfidenz

Installationsmetadaten

Paketmetadaten

Paketschlüssel	brew:pulumi
Version	3.254.0
Paketmanager	Homebrew
Paketmanager-Seite	https://formulae.brew.sh/formula/pulumi
Homepage	https://www.pulumi.com/
Repository	https://github.com/pulumi/pulumi
Upstream-Dokumentation	https://www.pulumi.com/docs
Lizenz	Apache-2.0
Quellarchiv	https://github.com/pulumi/pulumi.git
Zuletzt aktualisiert	2026-07-24T05:14:33Z
Pulse	updated
Build-Abhängigkeiten	go
Bottle	verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	nicht definiert
Dienst	keiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	pulumi
Version Scheme	0
Revision	0
Head Version	HEAD
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	head stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

pulumi

nix profile install nixpkgs#pulumi

normalized package name match
Abgeglichen nach: Pulumi

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/pu/pulumi/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

apk95%

pulumi 3.243.0-r0

Infrastructure as Code SDK

https://pulumi.com/

sudo apk add pulumi

License: Apache-2.0
Architecture: x86_64
Source Package: pulumi
1 Abhängigkeiten
1 stellt bereit
normalized package name match
Abgeglichen nach: Pulumi

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pulumi from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

apk95%

pulumi-bash-completion 3.243.0-r0

Bash completions for pulumi

https://pulumi.com/

sudo apk add pulumi-bash-completion

License: Apache-2.0
Architecture: x86_64
Source Package: pulumi
normalized package name match
Abgeglichen nach: Pulumi

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pulumi-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

apk95%

pulumi-fish-completion 3.243.0-r0

Fish completions for pulumi

https://pulumi.com/

sudo apk add pulumi-fish-completion

License: Apache-2.0
Architecture: x86_64
Source Package: pulumi
normalized package name match
Abgeglichen nach: Pulumi

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pulumi-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

apk95%

pulumi-language-go 3.243.0-r0

Infrastructure as Code SDK (Go language provider)

https://pulumi.com/

sudo apk add pulumi-language-go

License: Apache-2.0
Architecture: x86_64
Source Package: pulumi
1 Abhängigkeiten
1 stellt bereit
normalized package name match
Abgeglichen nach: Pulumi

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pulumi-language-go from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

apk95%

pulumi-language-nodejs 3.243.0-r0

Infrastructure as Code SDK (NodeJS language provider)

https://pulumi.com/

sudo apk add pulumi-language-nodejs

License: Apache-2.0
Architecture: x86_64
Source Package: pulumi
1 Abhängigkeiten
1 stellt bereit
normalized package name match
Abgeglichen nach: Pulumi

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pulumi-language-nodejs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

apk95%

pulumi-language-pcl 3.243.0-r0

Infrastructure as Code SDK (PCL language provider)

https://pulumi.com/

sudo apk add pulumi-language-pcl

License: Apache-2.0
Architecture: x86_64
Source Package: pulumi
1 Abhängigkeiten
1 stellt bereit
normalized package name match
Abgeglichen nach: Pulumi

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pulumi-language-pcl from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

apk95%

pulumi-language-python 3.243.0-r0

Infrastructure as Code SDK (Python language provider)

https://pulumi.com/

sudo apk add pulumi-language-python

License: Apache-2.0
Architecture: x86_64
Source Package: pulumi
1 Abhängigkeiten
1 stellt bereit
normalized package name match
Abgeglichen nach: Pulumi

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pulumi-language-python from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

apk95%

pulumi-zsh-completion 3.243.0-r0

Zsh completions for pulumi

https://pulumi.com/

sudo apk add pulumi-zsh-completion

License: Apache-2.0
Architecture: x86_64
Source Package: pulumi
normalized package name match
Abgeglichen nach: Pulumi

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pulumi-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

pacman95%

pulumi 3.242.0-1

Modern Infrastructure as Code

https://github.com/pulumi/pulumi

sudo pacman -S pulumi

License: Apache
Architecture: x86_64
1 Abhängigkeiten
normalized package name match
Abgeglichen nach: Pulumi

Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: pulumi from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

MacPorts95%

pulumi

sudo port install pulumi

normalized package name match
Abgeglichen nach: Pulumi

MacPorts ports tree · api.github.com · MacPorts ports tree: sysutils/pulumi/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

Chocolatey95%

pulumi

choco install pulumi

normalized package name match
Abgeglichen nach: Pulumi

Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: pulumi from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','pswinupdate'

Scoop95%

main/pulumi

scoop install main/pulumi

normalized package name match
Abgeglichen nach: Pulumi

Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/pulumi.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

winget95%

Pulumi.Pulumi

winget install --id Pulumi.Pulumi -e

normalized package name match
Abgeglichen nach: Pulumi

Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Pulumi.Pulumi from https://cdn.winget.microsoft.com/cache/source.msix

apk92%

pulumi-language-dotnet 3.106.2-r0

Infrastructure as Code SDK (.NET language provider)

https://pulumi.com/

sudo apk add pulumi-language-dotnet

License: Apache-2.0
Architecture: x86_64
Source Package: pulumi-language-dotnet
1 Abhängigkeiten
1 stellt bereit
installed executable or alias match
Abgeglichen nach: Pulumi Language Dotnet

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pulumi-language-dotnet from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

apk92%

pulumi-language-hcl 0.4.0-r0

Infrastructure as Code SDK (HCL language provider)

https://pulumi.com/

sudo apk add pulumi-language-hcl

License: Apache-2.0
Architecture: x86_64
Source Package: pulumi-language-hcl
1 Abhängigkeiten
1 stellt bereit
installed executable or alias match
Abgeglichen nach: Pulumi Language Hcl

Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: pulumi-language-hcl from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Combined YAML source

View the package source record on GitHub.

combined/pulumi.yml

Verwendete Quellen

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated agent safety answer
curated configuration and credential file locations
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

pulumi mit Homebrew, apk, chocolatey, MacPorts, Nix, pacman, scoop, winget installieren

Antwort zur Agent-Sicherheit

Credential-Zugriff

Änderungen an Remote-Zustand

Publish-/Artefakt-Risiko

Empfohlene Kontrolle

Hinweise für Agent-Nutzung

Weitere Installationsbefehle

macOS

Linux

Windows

Paketzusammenfassung

Projektlinks

Befehle und Aliase

Risikostufe: orange

Risikoklassifikator

Warum

Signale

Installationsverhalten

Empfohlene Prüfung

Configuration and credential file locations

Configuration files

Credential files

Installierte Executables

Version und Aktualität

Paketmetadaten

Details aus der Quelldatenbank

Andere Paketmanager-Einträge

Interne Paketlinks

Themen-Hubs

Verwandte Tools

Gleicher Workflow

Agent-Sicherheitsleitfäden

Aus Repository-Daten generiert

Combined YAML source

Verwendete Quellen