Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%

brew install smimesign

local Homebrew formula metadata

MacPortsverifiziert · 94%

sudo port install smimesign

MacPorts ports tree · security/smimesign/Portfile · Quelle: api.github.com

Linux

Nixverifiziert · 92%

nix profile install nixpkgs#smimesign

nixpkgs package indexes · pkgs/by-name/sm/smimesign/package.nix · Quelle: api.github.com

Windows

Scoopverifiziert · 92%

scoop install main/smimesign

Scoop official bucket manifest trees · bucket/smimesign.json · Quelle: api.github.com

Windows Package Managerverifiziert · 92%

winget install --id GitHub.smimesign -e

Windows Package Manager source index · GitHub.smimesign · Quelle: cdn.winget.microsoft.com

Überblick

Paketzusammenfassung

S/MIME signing utility for use with Git

Projektlinks

Befehle und Aliase

smimesign

Verlauf

Projektgeschichte und Nutzung

smimesign is GitHub's S/MIME signing utility for Git commits and tags on macOS and Windows. It matters in CLI packaging because it bridges Git's signing hooks with native X.509 certificate stores instead of requiring GnuPG keys.

Projektgeschichte

The official README describes smimesign as an S/MIME signing utility compatible with Git, using X.509 certificates from public or internal certificate authorities. It also states that the tool uses keys and certificates already stored in macOS Keychain or Windows Certificate Store.

Adoptionsgeschichte

The README documents Homebrew installation on macOS and Scoop installation on Windows, while the supplied package metadata also lists MacPorts, Nix, and winget. This made it installable through the same package managers developers already use for Git tooling.

Wie es verwendet wird

Users configure Git to invoke smimesign for signing. For Git 2.19 and newer, the README shows setting `gpg.x509.program` to `smimesign` and `gpg.format` to `x509`, either locally per repository or globally for all repositories.

Warum Paket-Nerds sich dafür interessieren

Package maintainers care because smimesign is security-sensitive, platform-specific, and tied to native certificate stores and smart cards. It is also a clear example of package managers distributing small developer-security helpers that integrate with a larger tool, Git.

Zeitleiste

2018: First GitHub release returned by the releases API was 0.0.1.
2018: README documents the Git 2.19 configuration split for X.509 signing.
2021: Repository release list shows v0.2.0-rc1 as the latest listed release.

Related projects

The README discusses Git, GnuPG, PKI, S/MIME, macOS Keychain, Windows Certificate Store, smart cards, OpenSC, and YubiKey PIV tooling.

Quellen

GitHub releases API for github/smimesign: first listed release 0.0.1 on 2018-09-11.
https://github.com/github/smimesign README: purpose, platform support, certificate stores, Git configuration, package-manager installation, smart-card notes.
input source_facts.package-manager: Homebrew, MacPorts, Nix, Scoop, and winget package names.

Sicherheitslage

Risikostufe: grün

narrow executable package without higher-risk signals.

Risikoklassifikator

grün Risiko · niedrig Konfidenz · appliance

Warum

narrow executable package without higher-risk signals

Signale

metadata:no-higher-risk-signals

Installationsverhalten

In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
Homebrew-Bottle-Metadaten sind für 11 Plattformziele verfügbar.
Build-Metadaten listen 1 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

Executables

Installierte Executables

Befehl	Art	Sichtbarkeit	Hinweis
`smimesign`	cli	globales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-26

Manager-Version0.2.0

Manager aktualisiert

lokale DatenOK

Upstreamaktuell

neueste erkannte Versionv0.2.0

https://github.com/github/smimesign

InfoNo package-manager update timestamp was available.niedrig Konfidenz

Installationsmetadaten

Paketmetadaten

Paketschlüssel	brew:smimesign
Version	0.2.0
Paketmanager	Homebrew
Paketmanager-Seite	https://formulae.brew.sh/formula/smimesign
Homepage	https://github.com/github/smimesign
Repository	https://github.com/github/smimesign
Upstream-Dokumentation	https://github.com/github/smimesign#readme
Lizenz	MIT
Quellarchiv	https://github.com/github/smimesign/archive/refs/tags/v0.2.0.tar.gz
Build-Abhängigkeiten	go
Bottle	verfügbar (auf arm64_big_sur, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura)
Homebrew post-install	nicht definiert
Dienst	keiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	smimesign
Version Scheme	0
Revision	0
Requirements	macos
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

smimesign

nix profile install nixpkgs#smimesign

normalized package name match
Abgeglichen nach: Smimesign

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/sm/smimesign/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

MacPorts95%

smimesign

sudo port install smimesign

normalized package name match
Abgeglichen nach: Smimesign

MacPorts ports tree · api.github.com · MacPorts ports tree: security/smimesign/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

Scoop95%

main/smimesign

scoop install main/smimesign

normalized package name match
Abgeglichen nach: Smimesign

Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/smimesign.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

winget95%

GitHub.smimesign

winget install --id GitHub.smimesign -e

normalized package name match
Abgeglichen nach: Smimesign

Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: GitHub.smimesign from https://cdn.winget.microsoft.com/cache/source.msix

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Combined YAML source

View the package source record on GitHub.

combined/smimesign.yml

Verwendete Quellen

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated package history
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

smimesign mit Homebrew, MacPorts, Nix, scoop, winget installieren