Automic VaultAutomic Vault

brew / Protected-Tool-Abdeckung / Rang 293

tailscale installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für tailscale in AI-Agent-Workflows.

InstallationsbefehlSicherheitshinweise

agent safety

Agent safety answer

tailscale controls private network connectivity and identity-bound device access.

Credential access

Reads auth state, device identity, and network configuration.

Remote mutation

Can change connectivity, serve routes, and expose local services.

Publish/artifact risk

Can make internal services reachable through a tailnet.

Recommended control

Gate up, serve, funnel, exit-node, and auth-key operations.

Agent-use guidance

Allow status checks; require approval before changing network exposure or authentication.

Installation

Mit Automic Vault installieren

Automic Vault
AV herunterladen
sudo av install brew:tailscale

macOS

Homebrewverified · 100%
brew install tailscale

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install tailscale

MacPorts ports tree · net/tailscale/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add tailscale

Alpine Linux edge package indexes · tailscale · source: dl-cdn.alpinelinux.org

Fedora dnfverified · 92%
sudo dnf install tailscale

Fedora Rawhide package metadata · tailscale · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#tailscale

nixpkgs package indexes · pkgs/by-name/ta/tailscale/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S tailscale

Arch Linux sync databases · tailscale · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%
sudo zypper install tailscale

openSUSE Tumbleweed package metadata · tailscale · source: download.opensuse.org

Windows

Chocolateyverified · 92%
choco install tailscale

Chocolatey community package catalog · tailscale · source: community.chocolatey.org

Scoopverified · 92%
scoop install extras/tailscale

Scoop official bucket manifest trees · bucket/tailscale.json · source: api.github.com

Windows Package Managerverified · 92%
winget install --id Tailscale.Tailscale -e

Windows Package Manager source index · Tailscale.Tailscale · source: cdn.winget.microsoft.com

Plattformhinweise

  • Es waren keine paketspezifischen Plattformhinweise vorhanden.

Überblick

Paketzusammenfassung

Easiest, most secure way to use WireGuard and 2FA

Befehle und Aliase

  • tailscale
  • tailscaled

Protected-Tool-Abdeckung

Plain Text Tailscale Node State

The Homebrew tailscale formula runs tailscaled as a daemon. Its node identity is stored in tailscaled state, not in a narrow CLI-owned token file. Homebrew/self-compiled macOS tailscaled state is plaintext JSON unless a platform-specific encrypted store is available. Automic Vault currently detects plaintext state but does not wrap the CLI or daemon.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • formula declares a Homebrew service

Signals

  • metadata:service

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Formula metadata declares a service or daemon block.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Lokaler README-Auszug

Tailscale Protected-tool coverage Detector

This detector reports readable plaintext Tailscale daemon state.

The Homebrew tailscale package installs both tailscale and tailscaled. The sensitive identity state belongs to tailscaled, not the CLI. Upstream macOS app builds can use Keychain-backed state, but the Homebrew/self-compiled daemon path is treated as plaintext state.

Detected hazards:

  • /Library/Tailscale/tailscaled.state
  • ~/.local/share/tailscale/tailscaled.state
  • $XDG_DATA_HOME/tailscale/tailscaled.state
  • Common Homebrew var state paths

This protected-tool coverage is detect-only. A wrapper around tailscale would not secure the daemon's persistent node identity. Remediation should happen in the daemon state store or in a source protected tool.

Quelle: local coverage notes

Quelle der Abdeckung

Quellauszug

Caveats

  • This radioisotope is detect-only.
  • We detect common macOS root and user tailscaled.state paths.
  • Root-owned state that the current user cannot read is skipped.
  • Future remediation should be an upstream daemon state integration or a source isotope, not a CLI wrapper.

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
tailscalecliglobal executable
tailscaledcliglobal executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-06-10
Manager-Version1.98.5
Manager aktualisiert2026-06-02
lokale Datenok
Upstreamnot checked
neueste erkannte Versionnot detected

https://github.com/tailscale/tailscale

Installationsmetadaten

Paketmetadaten

Package keybrew:tailscale
Version1.98.5
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/tailscale
Homepagehttps://tailscale.com
Repositoryhttps://github.com/tailscale/tailscale
Upstream docshttps://tailscale.com/docs
LicenseBSD-3-Clause
Source archivehttps://github.com/tailscale/tailscale.git
Last updated2026-06-02T00:45:52Z
Pulseupdated
Build dependenciesgo
Bottleavailable (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicedeclared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nametailscale
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

tailscale

nix profile install nixpkgs#tailscale
  • normalized package name match
  • Matched by: Tailscale
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ta/tailscale/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

tailscale 1.96.5-r1

The easiest, most secure way to use WireGuard and 2FA

https://tailscale.com/

sudo apk add tailscale
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: tailscale
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Tailscale
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: tailscale from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

tailscale-bash-completion 1.96.5-r1

Bash completions for tailscale

https://tailscale.com/

sudo apk add tailscale-bash-completion
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: tailscale
  • normalized package name match
  • Matched by: Tailscale
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: tailscale-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

tailscale-doc 1.96.5-r1

The easiest, most secure way to use WireGuard and 2FA (documentation)

https://tailscale.com/

sudo apk add tailscale-doc
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: tailscale
  • normalized package name match
  • Matched by: Tailscale
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: tailscale-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

tailscale-fish-completion 1.96.5-r1

Fish completions for tailscale

https://tailscale.com/

sudo apk add tailscale-fish-completion
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: tailscale
  • normalized package name match
  • Matched by: Tailscale
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: tailscale-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

tailscale-openrc 1.96.5-r1

The easiest, most secure way to use WireGuard and 2FA (OpenRC init scripts)

https://tailscale.com/

sudo apk add tailscale-openrc
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: tailscale
  • normalized package name match
  • Matched by: Tailscale
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: tailscale-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

tailscale-systemd 1.96.5-r1

The easiest, most secure way to use WireGuard and 2FA (systemd files)

https://tailscale.com/

sudo apk add tailscale-systemd
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: tailscale
  • normalized package name match
  • Matched by: Tailscale
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: tailscale-systemd from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

tailscale-zsh-completion 1.96.5-r1

Zsh completions for tailscale

https://tailscale.com/

sudo apk add tailscale-zsh-completion
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: tailscale
  • normalized package name match
  • Matched by: Tailscale
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: tailscale-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

tailscale 1.94.2-1.fc45

The easiest, most secure way to use WireGuard and 2FA

https://github.com/tailscale/tailscale

sudo dnf install tailscale
  • License: BSD-2-Clause AND MIT AND Apache-2.0 AND MPL-2.0 AND GPL-3.0-or-later AND ISC AND 0BSD AND BSD-3-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: tailscale
  • 6 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Tailscale
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: tailscale from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
pacman95%

tailscale 1.98.2-1

A mesh VPN that makes it easy to connect your devices, wherever they are.

https://tailscale.com

sudo pacman -S tailscale
  • License: MIT
  • Architecture: x86_64
  • 1 dependencies
  • normalized package name match
  • Matched by: Tailscale
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: tailscale from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

tailscale 1.96.4-1.2

The easiest, most secure way to use WireGuard and 2FA

https://github.com/tailscale/tailscale

sudo zypper install tailscale
  • License: BSD-3-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: tailscale
  • 4 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Tailscale
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: tailscale from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst
zypper95%

tailscale-bash-completion 1.96.4-1.2

Tailscale bash completion

https://github.com/tailscale/tailscale

sudo zypper install tailscale-bash-completion
  • License: BSD-3-Clause
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: tailscale
  • 1 provides
  • normalized package name match
  • Matched by: Tailscale
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: tailscale-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst
zypper95%

tailscale-fish-completion 1.96.4-1.2

Tailscale fish completion

https://github.com/tailscale/tailscale

sudo zypper install tailscale-fish-completion
  • License: BSD-3-Clause
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: tailscale
  • 1 provides
  • normalized package name match
  • Matched by: Tailscale
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: tailscale-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst
zypper95%

tailscale-zsh-completion 1.96.4-1.2

Tailsacle zsh completion

https://github.com/tailscale/tailscale

sudo zypper install tailscale-zsh-completion
  • License: BSD-3-Clause
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: tailscale
  • 1 provides
  • normalized package name match
  • Matched by: Tailscale
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: tailscale-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst
MacPorts95%

tailscale

sudo port install tailscale
  • normalized package name match
  • Matched by: Tailscale
MacPorts ports tree · api.github.com · MacPorts ports tree: net/tailscale/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Chocolatey95%

tailscale

choco install tailscale
  • normalized package name match
  • Matched by: Tailscale
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: tailscale from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','swissfileknife'

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Verwandte Tools

  • goBuild dependency declared by Homebrew.

Gleicher Workflow

  • wireguard-toolsShares av.db curated category or tags: cli, networking, vpn, wireguard.
  • wireguard-goShares av.db curated category or tags: cli, networking, vpn, wireguard.
  • wgcfShares av.db curated category or tags: cli, networking, vpn, wireguard.
  • nebulaShares av.db curated category or tags: cli, mesh-networking, networking, vpn.
  • boringtunShares av.db curated category or tags: cli, networking, vpn, wireguard.
  • headscale-cliShares av.db curated category or tags: cli, networking, vpn, wireguard.

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • external package-manager database matches
  • local coverage README
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • secret-handling manifest