Automic VaultAutomic Vault

brew

tfcmt mit Homebrew installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für tfcmt in AI-Agent-Workflows.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install tfcmt

local Homebrew formula metadata

Überblick

Paketzusammenfassung

Notify the execution result of terraform command

Verlauf

Projektgeschichte und Nutzung

tfcmt is a Terraform CI comment tool that posts the results of `terraform plan` and `terraform apply` to GitHub pull requests. The official documentation describes it as a fork of Mercari's `tfnotify`, expanded for Terraform 0.15 and later and for more configurable formatting.

Projektgeschichte

The project grew out of the `tfnotify` lineage: the README and documentation identify `tfcmt` as a fork of `mercari/tfnotify` v0.7.0 and preserve the original Mercari MIT license notice for the inherited code. Its own documentation copyright begins in 2021, which matches its role as a post-Terraform-0.15 replacement for teams that had outgrown the original notifier.

The repository has a large commit history and a long release line, reflecting ongoing maintenance around Terraform output formatting, GitHub comment behavior, masking, Terragrunt support, GitHub Enterprise support, and related CI workflow details.

Adoptionsgeschichte

The README includes a public 'Who uses tfcmt?' list naming organizations such as Recruit, Cybozu, READYFOR, CADDi, ZOZO, SAKURA internet, Unipos, HMCTS, LayerX, and others. That list is an unusually direct adoption signal for a Terraform niche tool.

Homebrew packages `tfcmt` as a formula, and the repository shows hundreds of GitHub stars. In package-manager terms, it is not a general Terraform frontend; it is a specialized CI companion used by teams that review infrastructure changes through pull requests.

Wie es verwendet wird

Typical use is in CI: run Terraform, let `tfcmt` parse the command output, render it through Go templates, update pull request labels, and post or patch a GitHub comment. The documentation emphasizes cleaner PR comment streams, hiding stale comments with `github-comment`, filtering noisy refresh output, and separating Terraform changes from non-Terraform output.

The tool is GitHub-focused. The README explicitly points GitLab users to `tfcmt-gitlab`, a separate fork.

Warum Paket-Nerds sich dafür interessieren

For package-nerd catalogs, `tfcmt` is significant because it represents a second-generation Terraform notifier: a fork maintained specifically to keep pace with Terraform CLI changes and modern pull-request automation. It sits in the small but important class of tools that make infrastructure-as-code review readable without requiring developers to open CI logs.

Its value is operational rather than architectural: teams install it with Homebrew or other release tooling, wire it into GitHub Actions or another CI runner, and get stable, templated pull-request feedback for Terraform workflows.

Zeitleiste

  • 2018: Original `tfnotify` code carried Mercari copyright and MIT licensing.
  • 2021: Official tfcmt documentation copyright begins and documents the fork's Terraform 0.15+ motivation.
  • 2026: GitHub repository page lists v4.14.15 as the latest release and shows more than one hundred releases.

Related projects

  • `mercari/tfnotify` is the upstream project from which `tfcmt` was forked.
  • `tfcmt-gitlab` is the GitLab-oriented fork suggested by the `tfcmt` README.
  • `github-comment` is documented as a companion tool for hiding stale comments.

Sicherheitslage

Risikostufe: grün

narrow executable package without higher-risk signals.

Risikoklassifikator

grün Risiko · niedrig Konfidenz · appliance

Warum

  • narrow executable package without higher-risk signals

Signale

  • metadata:no-higher-risk-signals

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
  • Build-Metadaten listen 1 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
tfcmt.yamltfcmt.yml.tfcmt.yaml.tfcmt.yml

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
tfcmtcliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-25
Manager-Version4.14.17
Manager aktualisiert2026-07-21
lokale DatenOK
Upstreamaktuell
neueste erkannte Versionv4.14.17

https://github.com/suzuki-shunsuke/tfcmt

  • OKEs wurden keine Aktualitätswarnungen generiert.

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:tfcmt
Version4.14.17
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/tfcmt
Homepagehttps://suzuki-shunsuke.github.io/tfcmt/
Repositoryhttps://github.com/suzuki-shunsuke/tfcmt
Upstream-Dokumentationhttps://suzuki-shunsuke.github.io/tfcmt
LizenzMIT
Quellarchivhttps://github.com/suzuki-shunsuke/tfcmt/archive/refs/tags/v4.14.17.tar.gz
Zuletzt aktualisiert2026-07-21T10:15:45Z
Pulseupdated
Build-Abhängigkeitengo
Bottleverfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nametfcmt
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • package relationship graph
  • package version freshness
  • package-page enrichment