agent safety

Agent safety answer

talosctl manages Talos Linux clusters and node configuration.

Credential access

Reads Talos config, cluster endpoints, and administrative credentials.

Remote mutation

Can reboot nodes, apply machine config, and change cluster state.

Publish/artifact risk

Can roll out machine configuration that affects workloads.

Recommended control

Gate config apply, reset, reboot, and destructive cluster commands.

Agent-use guidance

Allow health and config inspection; require approval for node or cluster mutations.

installation

Installer avec Automic Vault

Automic Vault

Télécharger AV

sudo av install brew:talosctl

macOS

Homebrewverified · 100%

brew install talosctl

local Homebrew formula metadata

Linux

Nixverified · 92%

nix profile install nixpkgs#talosctl

nixpkgs package indexes · pkgs/by-name/ta/talosctl/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%

sudo pacman -S talosctl

Arch Linux sync databases · talosctl · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%

sudo zypper install talosctl

openSUSE Tumbleweed package metadata · talosctl · source: download.opensuse.org

Windows

Scoopverified · 92%

scoop install main/talosctl

Scoop official bucket manifest trees · bucket/talosctl.json · source: api.github.com

Windows Package Managerverified · 92%

winget install --id Sidero.talosctl -e

Windows Package Manager source index · Sidero.talosctl · source: cdn.winget.microsoft.com

Source du gestionnaire de paquets

https://formulae.brew.sh/formula/talosctl

Notes de plateforme

Aucune note de plateforme propre au paquet n'était présente.

aperçu

Résumé du paquet

CLI for out-of-band management of Kubernetes nodes created by Talos

Page d'accueil

https://www.talos.dev/

Commandes et alias

talosctl

couverture d'outils protégés

Plain Text Talos Client Config

talosctl stores cluster client configuration in ~/.talos/config by default. The file can contain client certificate, private key, CA, and basic auth material. Our isotope stores the talosconfig in the macOS keychain and injects it through a temporary TALOSCONFIG path while `talosctl` runs.

Risk classifier

orange risk · medium confidence · infrastructure

Why

infrastructure mutation or orchestration signal

Signals

text:kubernetes

Install behavior

No Homebrew post-install hook is recorded in formula metadata.
Homebrew bottle metadata is available for 6 platform targets.
Build metadata lists 1 build dependencies.

Extrait README local

talosctl

talosctl reads its client configuration from ~/.talos/config by default. That talosconfig can contain client certificate, private key, CA, and basic auth material for Talos clusters.

This protected-tool coverage migrates the default talosconfig to the keychain and wraps talosctl so it is recreated under a temporary home and selected with TALOSCONFIG while the CLI runs.

Source: local coverage notes

Source de couverture

Extrait source

Caveats

Runtime talosconfig changes are not persisted back to keychain.
Direct execution of the original binary will not receive credentials.

exécutables

Exécutables installés

Commande	Type	Exposition	Note
`talosctl`	cli	global executable

fraîcheur

Version et fraîcheur

Ces signaux séparent l'âge de génération de la page, l'activité du gestionnaire de paquets et la comparaison avec les versions amont. Un retard de version n'est signalé que lorsqu'une URL de preuve et des versions comparables sont présentes.

page générée2026-06-10

version du gestionnaire1.13.4

gestionnaire mis à jour2026-06-09

données localesok

amontcurrent

dernière version détectéev1.13.4

https://github.com/siderolabs/talos

okNo freshness warnings were generated.

métadonnées d'installation

Métadonnées du paquet

Package key	brew:talosctl
Version	1.13.4
Package manager	Homebrew
Package manager page	https://formulae.brew.sh/formula/talosctl
Homepage	https://www.talos.dev/
Repository	https://github.com/siderolabs/talos
Upstream docs	https://docs.siderolabs.com/talos/v1.12/getting-started/talosctl
License	MPL-2.0
Source archive	https://github.com/siderolabs/talos/archive/refs/tags/v1.13.4.tar.gz
Last updated	2026-06-09T19:19:20Z
Pulse	updated
Build dependencies	go
Bottle	available (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	not defined
Service	none declared

registry facts

Source database details

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	talosctl
Version Scheme	0
Revision	0
Head Version	HEAD
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	head stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

talosctl

nix profile install nixpkgs#talosctl

normalized package name match
Matched by: Talosctl

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ta/talosctl/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

pacman95%

talosctl 1.13.2-1

CLI for Talos - A modern OS for Kubernetes

https://github.com/siderolabs/talos

sudo pacman -S talosctl

License: MPL-2.0
Architecture: x86_64
1 dependencies
normalized package name match
Matched by: Talosctl

Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: talosctl from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

zypper95%

talosctl 1.13.2-1.1

CLI to interact with Talos Linux

https://github.com/siderolabs/talos

sudo zypper install talosctl

License: MPL-2.0
Category: Unspecified
Architecture: x86_64
Source Package: talosctl
1 dependencies
1 provides
normalized package name match
Matched by: Talosctl

openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: talosctl from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst

zypper95%

talosctl-bash-completion 1.13.2-1.1

Bash Completion for talosctl

https://github.com/siderolabs/talos

sudo zypper install talosctl-bash-completion

License: MPL-2.0
Category: System/Shells
Architecture: noarch
Source Package: talosctl
2 dependencies
1 provides
normalized package name match
Matched by: Talosctl

openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: talosctl-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst

zypper95%

talosctl-fish-completion 1.13.2-1.1

Fish Completion for talosctl

https://github.com/siderolabs/talos

sudo zypper install talosctl-fish-completion

License: MPL-2.0
Category: System/Shells
Architecture: noarch
Source Package: talosctl
1 dependencies
1 provides
normalized package name match
Matched by: Talosctl

openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: talosctl-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst

zypper95%

talosctl-zsh-completion 1.13.2-1.1

Zsh Completion for talosctl

https://github.com/siderolabs/talos

sudo zypper install talosctl-zsh-completion

License: MPL-2.0
Category: System/Shells
Architecture: noarch
Source Package: talosctl
1 dependencies
1 provides
normalized package name match
Matched by: Talosctl

openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: talosctl-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst

Scoop95%

main/talosctl

scoop install main/talosctl

normalized package name match
Matched by: Talosctl

Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/talosctl.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

winget95%

Sidero.talosctl

winget install --id Sidero.talosctl -e

normalized package name match
Matched by: Talosctl

Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Sidero.talosctl from https://cdn.winget.microsoft.com/cache/source.msix

graphe de paquets

Les liens viennent du graphe local de relations entre paquets, des suppléments, des dépendances, des correspondances d'écosystèmes et de l'appartenance aux hubs.

piste source

Généré depuis les données du dépôt

Cette page est servie par av-web depuis l'artéfact SQLite privé des paquets généré par scripts/generate-pkg-sqlite.py.

Sources utilisées

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated agent safety answer
external package-manager database matches
local coverage README
package relationship graph
package version freshness
package-page enrichment
secret-handling manifest

Installer talosctl

Agent safety answer

Credential access

Remote mutation

Publish/artifact risk

Recommended control

Agent-use guidance

Installer avec Automic Vault

macOS

Linux

Windows

Source du gestionnaire de paquets

Notes de plateforme

Résumé du paquet

Page d'accueil

Commandes et alias

Plain Text Talos Client Config

Risk classifier

Why

Signals

Install behavior

talosctl

Source de couverture

Caveats

Exécutables installés

Version et fraîcheur

Métadonnées du paquet

Source database details

Other package-manager records

Liens internes de paquets

Hubs thématiques

Outils liés

Même workflow

Agent security guides

Généré depuis les données du dépôt

Sources utilisées