Automic VaultAutomic Vault

brew

terrahash mit Homebrew installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für terrahash in AI-Agent-Workflows.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install terrahash

local Homebrew formula metadata

Überblick

Paketzusammenfassung

Create and store a hash of the Terraform modules used by your configuration

Befehle und Aliase

  • terrahash

Verlauf

Projektgeschichte und Nutzung

TerraHash is a small Terraform module-locking CLI that creates and checks hashes for modules used by a Terraform configuration.

Projektgeschichte

The public GitHub repository was created in June 2024. Its README explicitly labels the project as early-stage software, while documenting the core behavior: evaluate initialized Terraform configuration, generate hashes for modules, and store them in a .terraform.module.lock.hcl file analogous to Terraform's provider lock file.

The tool's narrow purpose is supply-chain control for Terraform modules. It checks the lock file against current module hashes and version constraints, then reports changed hashes, changed versions, or missing modules.

Adoptionsgeschichte

Adoption appears niche and security-focused rather than broad. Repository metadata showed a small but visible public audience by July 2026, and Homebrew metadata lists a brew formula for the CLI.

Wie es verwendet wird

The README describes three central commands: terrahash init to create a module lock file, terrahash check to validate current modules against it, and terrahash upgrade to update the lock file after approved changes.

The project is meant to run in CI so deployments can fail when Terraform module code or version constraints diverge from the approved lock file.

Warum Paket-Nerds sich dafür interessieren

For package nerds, TerraHash is interesting because it fills a small gap in Terraform's lock-file story: Terraform has a provider lock file, while this tool experiments with a separate module lock file that can be installed as a simple CLI.

Zeitleiste

  • 2024: Public GitHub repository created.
  • 2024: README documents init, check, and upgrade workflows around .terraform.module.lock.hcl.
  • 2026: Homebrew metadata lists terrahash as a packaged CLI.

Related projects

  • Terraform supplies the module system and provider lock-file pattern that TerraHash mirrors.
  • Terragrunt and Terramate are adjacent Terraform workflow tools, but TerraHash is focused specifically on module hash verification.

Quellen

  • Input package metadata: source_facts.package-manager, source_facts.package-manager-url
  • README: https://github.com/ned1313/terrahash#readme
  • Repository metadata: https://api.github.com/repos/ned1313/terrahash

Sicherheitslage

Risikostufe: grün

narrow executable package without higher-risk signals.

Risikoklassifikator

grün Risiko · niedrig Konfidenz · appliance

Warum

  • narrow executable package without higher-risk signals

Signale

  • metadata:no-higher-risk-signals

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
  • Build-Metadaten listen 1 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
terrahashcliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-26
Manager-Version0.1.0
Manager aktualisiert
lokale DatenOK
Upstreamaktuell
neueste erkannte Versionv0.1.0

https://github.com/ned1313/terrahash

  • InfoNo package-manager update timestamp was available.niedrig Konfidenz

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:terrahash
Version0.1.0
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/terrahash
Homepagehttps://github.com/ned1313/terrahash
Repositoryhttps://github.com/ned1313/terrahash
Upstream-Dokumentationhttps://github.com/ned1313/terrahash#readme
LizenzMIT
Quellarchivhttps://github.com/ned1313/terrahash/archive/refs/tags/v0.1.0.tar.gz
Build-Abhängigkeitengo
Bottleverfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameterrahash
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • package relationship graph
  • package version freshness
  • package-page enrichment