brew package intelligence

aliyun-cli

Automic Vault tracks aliyun-cli because plain text alibaba cloud cli credentials matters when AI agents run command-line tools on macOS.

Read docs Run scanner

overview

What Automic Vault knows about aliyun-cli

Universal Command-Line Interface for Alibaba Cloud

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text Alibaba Cloud CLI Credentials

Alibaba Cloud CLI stores configured profile secrets in plaintext JSON under ~/.aliyun/config.json, including access_key_secret, sts_token, private_key, access_token, and OAuth refresh tokens. Our isotope stores that config in the macOS keychain and restores it into a temporary HOME only while `aliyun` runs.

Local README excerpt

Alibaba Cloud CLI radioisotope

This radioisotope protects Alibaba Cloud CLI credentials that are normally stored in plaintext JSON at ~/.aliyun/config.json.

What it migrates

It stores the full config JSON in the macOS keychain when any configured profile contains inline credential material such as:

access_key_secret
sts_token
private_key
access_token
oauth_access_token
oauth_refresh_token

The migration rewrites the local config to a valid JSON document with those secret fields blanked. At runtime the wrapper restores the original config under a temporary HOME.

Caveats

Only the default ~/.aliyun/config.json location is migrated.
Explicit --config-path arguments are not intercepted.
Runtime config changes are not persisted back to keychain.
Direct execution of the original binary will not receive credentials.

Source: data/radioisotopes/aliyun-cli/README.md

Coverage source

https://formulae.brew.sh/formula/aliyun-cli

Caveats

Only the default ~/.aliyun/config.json location is migrated.
Explicit --config-path arguments can override the temporary config.
Runtime config changes are not persisted back to keychain.
Direct execution of the original binary will not receive credentials.

install metadata

Resolver facts

Package key	brew:aliyun-cli
Last updated	2026-05-15T06:34:23Z
Pulse	updated

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

Nucleus package database
local isotope README
radioisotope security manifest