Automic VaultAutomic Vault

brew / 承認ゲート

mkcert を Homebrew, apk, chocolatey, apt, dnf, MacPorts, Nix, pacman, zypper, scoop, winget でインストール

mkcert のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

エージェント安全性

エージェント安全性の回答

mkcert creates local certificate authorities and development certificates.

認証情報アクセス

Touches local trust stores and private key material.

リモート変更

Primarily mutates local trust state, not remote systems.

公開/成果物リスク

Can create certificates that influence development service trust.

推奨コントロール

Gate CA installation and private-key handling.

エージェント利用ガイダンス

Allow certificate inspection; require approval before installing trust roots or writing private keys.

インストール

追加のインストールコマンド

macOS

Homebrew確認済み · 100%
brew install mkcert

local Homebrew formula metadata

MacPorts確認済み · 94%
sudo port install mkcert

MacPorts ports tree · security/mkcert/Portfile · ソース: api.github.com

Linux

Alpine Linux apk確認済み · 92%
sudo apk add mkcert

Alpine Linux edge package indexes · mkcert · ソース: dl-cdn.alpinelinux.org

Debian apt確認済み · 92%
sudo apt install mkcert

Debian stable package indexes · mkcert · ソース: deb.debian.org

Fedora dnf確認済み · 92%
sudo dnf install mkcert

Fedora Rawhide package metadata · mkcert · ソース: dl.fedoraproject.org

Nix確認済み · 92%
nix profile install nixpkgs#mkcert

nixpkgs package indexes · pkgs/by-name/mk/mkcert/package.nix · ソース: api.github.com

Arch Linux pacman確認済み · 92%
sudo pacman -S mkcert

Arch Linux sync databases · mkcert · ソース: geo.mirror.pkgbuild.com

openSUSE zypper確認済み · 92%
sudo zypper install mkcert

openSUSE Tumbleweed package metadata · mkcert · ソース: download.opensuse.org

Windows

Chocolatey確認済み · 92%
choco install mkcert

Chocolatey community package catalog · mkcert · ソース: community.chocolatey.org

Scoop確認済み · 92%
scoop install extras/mkcert

Scoop official bucket manifest trees · bucket/mkcert.json · ソース: api.github.com

Windows Package Manager確認済み · 92%
winget install --id FiloSottile.mkcert -e

Windows Package Manager source index · FiloSottile.mkcert · ソース: cdn.winget.microsoft.com

概要

パッケージ概要

Simple tool to make locally trusted development certificates

コマンドとエイリアス

  • mkcert

履歴

プロジェクトの歴史と使われ方

mkcert is Filippo Valsorda's small Go tool for locally trusted development certificates. It appeared in the 2018 developer conversation around localhost HTTPS and was explained by Valsorda in a January 2019 post: deployment certificates had become easier through ACME and Let's Encrypt, but development still fell back to HTTP because localhost and private development names cannot use ordinary public CA validation.

プロジェクトの歴史

The tool's core idea is deliberately narrow. Instead of asking each developer to memorize OpenSSL invocations or manage browser trust stores by hand, mkcert creates a local certificate authority, installs it into the system and Firefox/NSS trust stores where supported, and issues certificates for local hostnames, IP addresses, and wildcards. The upstream README also warns that the generated root CA private key can intercept secure requests from the machine, which is why mkcert is framed as a local development tool rather than production CA infrastructure.

使われ方

mkcert became a common package-manager utility because it solves a recurring web-development pain point with one command and no project-specific configuration. Homebrew, MacPorts, Linux packages, and prebuilt binaries cover the usual developer platforms, while the README leaves web-server configuration to the user after the certificate and key are generated.

承認ゲート

危険なコマンドの人手レビュー用メタデータ

ローカルの承認ゲートシードには mkcert 用のルールが 4 件含まれます。対象エントリポイント: mkcert。重大度ラベル: 重大, 高。カバレッジ: partial、レビュー日: 2026-05-21。

ゲート対象アクション例

  • Install the local CA into system or browser trust stores.
  • Remove the local CA from trust stores.
  • Generate local certificates and private keys.
  • Write certificate or key files to caller-specified paths.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Credential files

Credential-bearing paths to review before unattended agent runs.

macOS
~/Library/Application Support/mkcert/rootCA-key.pem

実行可能ファイル

インストールされる実行可能ファイル

コマンド種類公開範囲メモ
mkcertcliグローバル実行可能ファイル

鮮度

バージョンと鮮度

これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。

ページ生成日2026-07-25
マネージャ版1.4.4
マネージャ更新日
ローカルデータOK
上流最新
検出された最新v1.4.4

https://github.com/FiloSottile/mkcert

  • 情報No package-manager update timestamp was available.信頼度 低

インストールメタデータ

パッケージメタデータ

パッケージキーbrew:mkcert
バージョン1.4.4
パッケージマネージャHomebrew
パッケージマネージャページhttps://formulae.brew.sh/formula/mkcert
ホームページhttps://github.com/FiloSottile/mkcert
リポジトリhttps://github.com/FiloSottile/mkcert
上流ドキュメントhttps://github.com/FiloSottile/mkcert#readme
ライセンスBSD-3-Clause
ソースアーカイブhttps://github.com/FiloSottile/mkcert/archive/refs/tags/v1.4.4.tar.gz
ビルド依存関係go
Bottle利用可能 (対象 arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura, x86_64_linux)
Homebrew post-install未定義
サービス宣言なし

レジストリ情報

ソースデータベース詳細

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namemkcert
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

ソースデータベース一致

他のパッケージマネージャ記録

一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。

Debian apt95%

mkcert 1.4.4-1+b18

Simple zero-config tool to make locally trusted certificates

https://github.com/FiloSottile/mkcert

sudo apt install mkcert
  • Section: utils
  • Architecture: amd64
  • Source Package: mkcert
  • 1 依存関係
  • normalized package name match
  • 一致条件: Mkcert
Debian stable package indexes · deb.debian.org · Debian stable package indexes: mkcert from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

mkcert

nix profile install nixpkgs#mkcert
  • normalized package name match
  • 一致条件: Mkcert
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/mk/mkcert/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

mkcert 1.4.4-1ubuntu2

Simple zero-config tool to make locally trusted certificates

https://github.com/FiloSottile/mkcert

sudo apt install mkcert
  • Section: universe/utils
  • Architecture: amd64
  • 1 依存関係
  • normalized package name match
  • 一致条件: Mkcert
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: mkcert from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

mkcert 1.4.4-r29

simple zero-config tool to make locally trusted development certificates with any names you'd like

https://mkcert.dev/

sudo apk add mkcert
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: mkcert
  • 1 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Mkcert
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: mkcert from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
dnf95%

mkcert 1.4.4-9.fc45

Make and install locally trusted development certificates

https://github.com/FiloSottile/mkcert

sudo dnf install mkcert
  • License: BSD-2-Clause-Views AND BSD-3-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: mkcert
  • 4 依存関係
  • 2 提供
  • normalized package name match
  • 一致条件: Mkcert
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: mkcert from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

mkcert 1.4.4-3

Simple tool for making locally-trusted development certificates

https://github.com/FiloSottile/mkcert

sudo pacman -S mkcert
  • License: BSD
  • Architecture: x86_64
  • 1 依存関係
  • normalized package name match
  • 一致条件: Mkcert
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: mkcert from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

mkcert 1.4.4-1.4

CLI tool for making locally-trusted development certificates

https://github.com/FiloSottile/mkcert

sudo zypper install mkcert
  • License: BSD-3-Clause
  • Category: Development/Tools/Other
  • Architecture: x86_64
  • Source Package: mkcert
  • 2 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Mkcert
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: mkcert from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
MacPorts95%

mkcert

sudo port install mkcert
  • normalized package name match
  • 一致条件: Mkcert
MacPorts ports tree · api.github.com · MacPorts ports tree: security/mkcert/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Chocolatey95%

mkcert

choco install mkcert
  • normalized package name match
  • 一致条件: Mkcert
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: mkcert from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','mirc'
Scoop95%

extras/mkcert

scoop install extras/mkcert
  • normalized package name match
  • 一致条件: Mkcert
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/mkcert.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1
winget95%

FiloSottile.mkcert

winget install --id FiloSottile.mkcert -e
  • normalized package name match
  • 一致条件: Mkcert
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: FiloSottile.mkcert from https://cdn.winget.microsoft.com/cache/source.msix

ソース経路

リポジトリデータから生成

このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。

使用ソース

  • Geiger risk classifier
  • Nucleus package database
  • approval-gate seed metadata
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment