macOS
Homebrewverifiziert · 100%
brew install trailscraperlocal Homebrew formula metadata
brew
trailscraper mit Homebrew installieren
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für trailscraper in AI-Agent-Workflows.
Installation
Weitere Installationsbefehle
Überblick
Paketzusammenfassung
Tool to get valuable information out of AWS CloudTrail
Projektlinks
Befehle und Aliase
- trailscraper
Verlauf
Projektgeschichte und Nutzung
TrailScraper is a small security-oriented command-line tool for extracting useful information from AWS CloudTrail and working with IAM policies. Its documented workflow centers on selecting or downloading CloudTrail records, then generating or extending IAM policy statements from the observed API activity.
Projektgeschichte
The project presents itself as both a CloudTrail analysis tool and a general-purpose IAM policy toolbox. Its README documents Homebrew, pip, and container installation paths, and notes that container images from version 0.7.0 onward moved to GitHub Container Registry while older images remained on DockerHub.
Official release metadata shows TrailScraper continuing as a low-volume but maintained utility through the 2020s, with releases from the 0.5 series in 2018 through 0.10.0 at the end of 2025.
Adoptionsgeschichte
TrailScraper's adoption appears concentrated in AWS security and infrastructure workflows rather than broad developer use. The official README leads with `brew install trailscraper`, `pip install trailscraper`, and Docker examples, indicating that its audience is operators who want the tool available in local shells, CI jobs, or short-lived containers.
Wie es verwendet wird
The CLI is used to query CloudTrail directly, download CloudTrail logs from S3, filter downloaded records, and pipe selected records into policy generation. Its examples include account, region, organization-trail, time-window, and assumed-role filters, then show JSON IAM policy output.
Warum Paket-Nerds sich dafür interessieren
For package-manager users, TrailScraper is notable as a focused AWS least-privilege helper that can be installed without cloning a security toolkit. Its Homebrew and container install paths make it convenient for ephemeral audits, Terraform-permission discovery, and shell pipelines around AWS credentials.
Zeitleiste
- 2018: Official GitHub releases include the 0.5 series.
- 2021: The README notes that current container images starting with 0.7.0 are published on GitHub Container Registry.
- 2025: Official GitHub releases list version 0.10.0.
Related projects
- TrailScraper operates in the same AWS security niche as IAM policy generation, CloudTrail log analysis, and infrastructure-as-code permission discovery tools. Its README also points users to cfn-flip when they want generated policies converted from JSON to CloudFormation YAML.
Quellen
Sicherheitslage
Risikostufe: orange
infrastructure mutation or orchestration signal.
Risikoklassifikator
orange Risiko · mittel Konfidenz · infrastructure
Warum
- infrastructure mutation or orchestration signal
Signale
- text:cloud
Installationsverhalten
- In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
- Homebrew-Bottle-Metadaten sind für 8 Plattformziele verfügbar.
- Installiert mit 1 Laufzeitabhängigkeiten.
Empfohlene Prüfung
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
~/.aws
Executables
Installierte Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
trailscraper | cli | globales Executable |
Aktualität
Version und Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Seite generiert2026-07-26
Manager-Version0.10.0
Manager aktualisiert2026-05-15
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt
https://github.com/flosell/trailscraper
- InfoNo cached GitHub release or tag data was available.https://github.com/flosell/trailscrapernone Konfidenz
Installationsmetadaten
Paketmetadaten
| Paketschlüssel | brew:trailscraper |
|---|---|
| Version | 0.10.0 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/trailscraper |
| Homepage | https://github.com/flosell/trailscraper |
| Repository | https://github.com/flosell/trailscraper |
| Upstream-Dokumentation | https://github.com/flosell/trailscraper#readme |
| Lizenz | Apache-2.0 |
| Quellarchiv | https://files.pythonhosted.org/packages/43/82/74344dd629ac17dc4b3906eb07a53a731c3ccc80913abdbbe378c658498f/trailscraper-0.10.0.tar.gz |
| Zuletzt aktualisiert | 2026-05-15T13:33:37Z |
| Pulse | updated |
| Abhängigkeiten | python@3.14 |
| Bottle | verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sequoia, sonoma, tahoe, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
Details aus der Quelldatenbank
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | trailscraper |
| Version Scheme | 0 |
| Revision | 2 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Quellspur
Aus Repository-Daten generiert
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
Combined YAML source
View the package source record on GitHub.
Verwendete Quellen
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- package relationship graph
- package version freshness
- package-page enrichment