Agent-Sicherheit

Antwort zur Agent-Sicherheit

sqlcmd sends SQL to Microsoft SQL Server and Azure SQL targets.

Credential-Zugriff

Reads database passwords, connection strings, tokens, and environment credentials.

Änderungen an Remote-Zustand

Can create, alter, drop, import, and export database state.

Publish-/Artefakt-Risiko

Can dump or load data artifacts containing sensitive records.

Empfohlene Kontrolle

Gate write SQL, dumps, imports, and credential-bearing connection strings.

Hinweise für Agent-Nutzung

Allow safe metadata queries; require approval for writes, exports, and secret use.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%

brew install sqlcmd

local Homebrew formula metadata

Linux

Nixverifiziert · 92%

nix profile install nixpkgs#sqlcmd

nixpkgs package indexes · pkgs/by-name/sq/sqlcmd/package.nix · Quelle: api.github.com

Windows

Chocolateyverifiziert · 92%

choco install sqlcmd

Chocolatey community package catalog · sqlcmd · Quelle: community.chocolatey.org

Windows Package Managerverifiziert · 92%

winget install --id Microsoft.Sqlcmd -e

Windows Package Manager source index · Microsoft.Sqlcmd · Quelle: cdn.winget.microsoft.com

Überblick

Paketzusammenfassung

Microsoft SQL Server command-line interface

Projektlinks

Befehle und Aliase

sqlcmd

Verlauf

Projektgeschichte und Nutzung

sqlcmd is Microsoft's command-line interface for SQL Server and Azure SQL. The Homebrew formula tracks the newer Go implementation, go-sqlcmd, which preserves much of the long-running ODBC sqlcmd workflow while adding modern package-manager distribution and container-oriented commands.

Projektgeschichte

Microsoft's go-sqlcmd repository was created in 2021, and its README says the project aims to be a complete Go port of the original ODBC sqlcmd using the go-mssqldb driver.

The first preview releases appeared in 2021. The README documents both backward-compatible ODBC-style flags and newer POSIX-style flags, plus additions such as local SQL Server container creation and context management.

Adoptionsgeschichte

The Go version is explicitly packaged for major platforms: the README lists Winget, Chocolatey, Homebrew, Linuxbrew, apt, yum, zypper, and release artifacts. The input package metadata lists Homebrew, Chocolatey, Nix, and Winget identifiers.

Wie es verwendet wird

Common usage includes running queries against SQL Server or Azure SQL, piping SQL into the CLI for scripts, creating local SQL Server containers with sqlcmd create mssql, and switching saved connection contexts stored under ~/.sqlcmd/sqlconfig.

Warum Paket-Nerds sich dafür interessieren

Package nerds care about go-sqlcmd because it turns a historically vendor-installed database utility into a cross-platform package-manager CLI, bridging Windows SQL Server habits with Homebrew, Winget, Chocolatey, Linux packaging, and container-first local development.

Zeitleiste

2021: go-sqlcmd repository created.
2021: v0.0.5 and v0.1.0 preview releases published.
2022: early releases add more compatibility switches.
Current README: documents package-manager installs and backward compatibility differences from ODBC sqlcmd.

Related projects

go-sqlcmd is related to the original ODBC sqlcmd, Microsoft's go-mssqldb driver, SQL Server, Azure SQL Database, Azure Synapse, Docker or Podman local SQL Server workflows, and Azure Data Studio integration.

Quellen

https://api.github.com/repos/microsoft/go-sqlcmd
https://api.github.com/repos/microsoft/go-sqlcmd/releases
https://github.com/microsoft/go-sqlcmd#readme
https://learn.microsoft.com/en-us/sql/tools/sqlcmd/sqlcmd-utility
input.source_facts.package-manager

Sicherheitslage

Risikostufe: blue

broad file, network, media, or database tool signal.

Risikoklassifikator

blue Risiko · mittel Konfidenz · tool

Warum

broad file, network, media, or database tool signal

Signale

text:sql,server

Installationsverhalten

In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
Build-Metadaten listen 1 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: ~/.sqlcmd/sqlconfig

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix: ~/.sqlcmd/sqlconfig

Executables

Installierte Executables

Befehl	Art	Sichtbarkeit	Hinweis
`sqlcmd`	cli	globales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-25

Manager-Version1.10.0

Manager aktualisiert

lokale DatenOK

Upstreamaktuell

neueste erkannte Versionv1.10.0

https://github.com/microsoft/go-sqlcmd

InfoNo package-manager update timestamp was available.niedrig Konfidenz

Installationsmetadaten

Paketmetadaten

Paketschlüssel	brew:sqlcmd
Version	1.10.0
Paketmanager	Homebrew
Paketmanager-Seite	https://formulae.brew.sh/formula/sqlcmd
Homepage	https://github.com/microsoft/go-sqlcmd
Repository	https://github.com/microsoft/go-sqlcmd
Upstream-Dokumentation	https://github.com/microsoft/go-sqlcmd#readme
Lizenz	MIT
Quellarchiv	https://github.com/microsoft/go-sqlcmd/archive/refs/tags/v1.10.0.tar.gz
Build-Abhängigkeiten	go
Bottle	verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	nicht definiert
Dienst	keiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	sqlcmd
Version Scheme	0
Revision	0
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

sqlcmd

nix profile install nixpkgs#sqlcmd

normalized package name match
Abgeglichen nach: Sqlcmd

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/sq/sqlcmd/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

Chocolatey95%

sqlcmd

choco install sqlcmd

normalized package name match
Abgeglichen nach: Sqlcmd

Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: sqlcmd from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','sql2008r2.cmdline'

winget95%

Microsoft.Sqlcmd

winget install --id Microsoft.Sqlcmd -e

normalized package name match
Abgeglichen nach: Sqlcmd

Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Microsoft.Sqlcmd from https://cdn.winget.microsoft.com/cache/source.msix

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Combined YAML source

View the package source record on GitHub.

combined/sqlcmd.yml

Verwendete Quellen

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated agent safety answer
curated configuration and credential file locations
curated package history
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

sqlcmd mit Homebrew, chocolatey, Nix, winget installieren