Automic VaultAutomic Vault

brew / couverture d'outils protégés / rang 293

Installer tailscale

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de tailscale pour les workflows d'agents IA.

Commande d'installationNotes de sécurité

agent safety

Agent safety answer

tailscale controls private network connectivity and identity-bound device access.

Credential access

Reads auth state, device identity, and network configuration.

Remote mutation

Can change connectivity, serve routes, and expose local services.

Publish/artifact risk

Can make internal services reachable through a tailnet.

Recommended control

Gate up, serve, funnel, exit-node, and auth-key operations.

Agent-use guidance

Allow status checks; require approval before changing network exposure or authentication.

installation

Installer avec Automic Vault

Automic Vault
Télécharger AV
sudo av install brew:tailscale

macOS

Homebrewverified · 100%
brew install tailscale

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install tailscale

MacPorts ports tree · net/tailscale/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add tailscale

Alpine Linux edge package indexes · tailscale · source: dl-cdn.alpinelinux.org

Fedora dnfverified · 92%
sudo dnf install tailscale

Fedora Rawhide package metadata · tailscale · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#tailscale

nixpkgs package indexes · pkgs/by-name/ta/tailscale/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S tailscale

Arch Linux sync databases · tailscale · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%
sudo zypper install tailscale

openSUSE Tumbleweed package metadata · tailscale · source: download.opensuse.org

Windows

Chocolateyverified · 92%
choco install tailscale

Chocolatey community package catalog · tailscale · source: community.chocolatey.org

Scoopverified · 92%
scoop install extras/tailscale

Scoop official bucket manifest trees · bucket/tailscale.json · source: api.github.com

Windows Package Managerverified · 92%
winget install --id Tailscale.Tailscale -e

Windows Package Manager source index · Tailscale.Tailscale · source: cdn.winget.microsoft.com

Notes de plateforme

  • Aucune note de plateforme propre au paquet n'était présente.

aperçu

Résumé du paquet

Easiest, most secure way to use WireGuard and 2FA

Commandes et alias

  • tailscale
  • tailscaled

couverture d'outils protégés

Plain Text Tailscale Node State

The Homebrew tailscale formula runs tailscaled as a daemon. Its node identity is stored in tailscaled state, not in a narrow CLI-owned token file. Homebrew/self-compiled macOS tailscaled state is plaintext JSON unless a platform-specific encrypted store is available. Automic Vault currently detects plaintext state but does not wrap the CLI or daemon.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • formula declares a Homebrew service

Signals

  • metadata:service

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Formula metadata declares a service or daemon block.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Extrait README local

Tailscale Protected-tool coverage Detector

This detector reports readable plaintext Tailscale daemon state.

The Homebrew tailscale package installs both tailscale and tailscaled. The sensitive identity state belongs to tailscaled, not the CLI. Upstream macOS app builds can use Keychain-backed state, but the Homebrew/self-compiled daemon path is treated as plaintext state.

Detected hazards:

  • /Library/Tailscale/tailscaled.state
  • ~/.local/share/tailscale/tailscaled.state
  • $XDG_DATA_HOME/tailscale/tailscaled.state
  • Common Homebrew var state paths

This protected-tool coverage is detect-only. A wrapper around tailscale would not secure the daemon's persistent node identity. Remediation should happen in the daemon state store or in a source protected tool.

Source: local coverage notes

Source de couverture

Extrait source

Caveats

  • This radioisotope is detect-only.
  • We detect common macOS root and user tailscaled.state paths.
  • Root-owned state that the current user cannot read is skipped.
  • Future remediation should be an upstream daemon state integration or a source isotope, not a CLI wrapper.

exécutables

Exécutables installés

CommandeTypeExpositionNote
tailscalecliglobal executable
tailscaledcliglobal executable

fraîcheur

Version et fraîcheur

Ces signaux séparent l'âge de génération de la page, l'activité du gestionnaire de paquets et la comparaison avec les versions amont. Un retard de version n'est signalé que lorsqu'une URL de preuve et des versions comparables sont présentes.

page générée2026-06-10
version du gestionnaire1.98.5
gestionnaire mis à jour2026-06-02
données localesok
amontnot checked
dernière version détectéenot detected

https://github.com/tailscale/tailscale

métadonnées d'installation

Métadonnées du paquet

Package keybrew:tailscale
Version1.98.5
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/tailscale
Homepagehttps://tailscale.com
Repositoryhttps://github.com/tailscale/tailscale
Upstream docshttps://tailscale.com/docs
LicenseBSD-3-Clause
Source archivehttps://github.com/tailscale/tailscale.git
Last updated2026-06-02T00:45:52Z
Pulseupdated
Build dependenciesgo
Bottleavailable (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicedeclared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nametailscale
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

tailscale

nix profile install nixpkgs#tailscale
  • normalized package name match
  • Matched by: Tailscale
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ta/tailscale/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

tailscale 1.96.5-r1

The easiest, most secure way to use WireGuard and 2FA

https://tailscale.com/

sudo apk add tailscale
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: tailscale
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Tailscale
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: tailscale from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

tailscale-bash-completion 1.96.5-r1

Bash completions for tailscale

https://tailscale.com/

sudo apk add tailscale-bash-completion
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: tailscale
  • normalized package name match
  • Matched by: Tailscale
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: tailscale-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

tailscale-doc 1.96.5-r1

The easiest, most secure way to use WireGuard and 2FA (documentation)

https://tailscale.com/

sudo apk add tailscale-doc
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: tailscale
  • normalized package name match
  • Matched by: Tailscale
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: tailscale-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

tailscale-fish-completion 1.96.5-r1

Fish completions for tailscale

https://tailscale.com/

sudo apk add tailscale-fish-completion
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: tailscale
  • normalized package name match
  • Matched by: Tailscale
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: tailscale-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

tailscale-openrc 1.96.5-r1

The easiest, most secure way to use WireGuard and 2FA (OpenRC init scripts)

https://tailscale.com/

sudo apk add tailscale-openrc
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: tailscale
  • normalized package name match
  • Matched by: Tailscale
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: tailscale-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

tailscale-systemd 1.96.5-r1

The easiest, most secure way to use WireGuard and 2FA (systemd files)

https://tailscale.com/

sudo apk add tailscale-systemd
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: tailscale
  • normalized package name match
  • Matched by: Tailscale
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: tailscale-systemd from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

tailscale-zsh-completion 1.96.5-r1

Zsh completions for tailscale

https://tailscale.com/

sudo apk add tailscale-zsh-completion
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: tailscale
  • normalized package name match
  • Matched by: Tailscale
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: tailscale-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

tailscale 1.94.2-1.fc45

The easiest, most secure way to use WireGuard and 2FA

https://github.com/tailscale/tailscale

sudo dnf install tailscale
  • License: BSD-2-Clause AND MIT AND Apache-2.0 AND MPL-2.0 AND GPL-3.0-or-later AND ISC AND 0BSD AND BSD-3-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: tailscale
  • 6 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Tailscale
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: tailscale from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst
pacman95%

tailscale 1.98.2-1

A mesh VPN that makes it easy to connect your devices, wherever they are.

https://tailscale.com

sudo pacman -S tailscale
  • License: MIT
  • Architecture: x86_64
  • 1 dependencies
  • normalized package name match
  • Matched by: Tailscale
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: tailscale from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

tailscale 1.96.4-1.2

The easiest, most secure way to use WireGuard and 2FA

https://github.com/tailscale/tailscale

sudo zypper install tailscale
  • License: BSD-3-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: tailscale
  • 4 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Tailscale
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: tailscale from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst
zypper95%

tailscale-bash-completion 1.96.4-1.2

Tailscale bash completion

https://github.com/tailscale/tailscale

sudo zypper install tailscale-bash-completion
  • License: BSD-3-Clause
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: tailscale
  • 1 provides
  • normalized package name match
  • Matched by: Tailscale
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: tailscale-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst
zypper95%

tailscale-fish-completion 1.96.4-1.2

Tailscale fish completion

https://github.com/tailscale/tailscale

sudo zypper install tailscale-fish-completion
  • License: BSD-3-Clause
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: tailscale
  • 1 provides
  • normalized package name match
  • Matched by: Tailscale
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: tailscale-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst
zypper95%

tailscale-zsh-completion 1.96.4-1.2

Tailsacle zsh completion

https://github.com/tailscale/tailscale

sudo zypper install tailscale-zsh-completion
  • License: BSD-3-Clause
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: tailscale
  • 1 provides
  • normalized package name match
  • Matched by: Tailscale
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: tailscale-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst
MacPorts95%

tailscale

sudo port install tailscale
  • normalized package name match
  • Matched by: Tailscale
MacPorts ports tree · api.github.com · MacPorts ports tree: net/tailscale/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Chocolatey95%

tailscale

choco install tailscale
  • normalized package name match
  • Matched by: Tailscale
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: tailscale from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','swissfileknife'

graphe de paquets

Les liens viennent du graphe local de relations entre paquets, des suppléments, des dépendances, des correspondances d'écosystèmes et de l'appartenance aux hubs.

Outils liés

  • goBuild dependency declared by Homebrew.

Même workflow

  • wireguard-toolsShares av.db curated category or tags: cli, networking, vpn, wireguard.
  • wireguard-goShares av.db curated category or tags: cli, networking, vpn, wireguard.
  • wgcfShares av.db curated category or tags: cli, networking, vpn, wireguard.
  • nebulaShares av.db curated category or tags: cli, mesh-networking, networking, vpn.
  • boringtunShares av.db curated category or tags: cli, networking, vpn, wireguard.
  • headscale-cliShares av.db curated category or tags: cli, networking, vpn, wireguard.

piste source

Généré depuis les données du dépôt

Cette page est servie par av-web depuis l'artéfact SQLite privé des paquets généré par scripts/generate-pkg-sqlite.py.

Sources utilisées

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • external package-manager database matches
  • local coverage README
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • secret-handling manifest