Credential access
Reads Alibaba Cloud access keys, profiles, and environment credentials.
brew
Install aliyun-cli with Homebrew, Nix, pacman, winget, zypper, scoop
Universal Command-Line Interface for Alibaba Cloud. Version 3.4.5 via Homebrew; verified 2026-07-07.
agent safety
Agent safety answer
aliyun-cli controls Alibaba Cloud resources from local credentials.
Remote mutation
Can create, delete, and modify cloud resources.
Publish/artifact risk
Can deploy infrastructure and upload artifacts to cloud services.
Recommended control
Gate mutating aliyun commands and credential access.
Agent-use guidance
Allow read-only listing; require approval for writes, deletes, and deploys.
install
Additional install commands
macOS
Homebrewverified · 100%
brew install aliyun-clilocal Homebrew formula metadata
Linux
Nixverified · 92%
nix profile install nixpkgs#aliyun-clinixpkgs package indexes · pkgs/by-name/al/aliyun-cli/package.nix · source: api.github.com
Arch Linux pacmanverified · 92%
sudo pacman -S aliyun-cliArch Linux sync databases · aliyun-cli · source: geo.mirror.pkgbuild.com
openSUSE zypperverified · 92%
sudo zypper install aliyun-cliopenSUSE Tumbleweed package metadata · aliyun-cli · source: download.opensuse.org
Windows
Windows Package Managerverified · 92%
winget install --id Alibaba.AlibabaCloudCLI -eWindows Package Manager source index · Alibaba.AlibabaCloudCLI · source: cdn.winget.microsoft.com
Scoopverified · 92%
scoop install main/aliyunScoop official bucket manifest trees · bucket/aliyun.json · source: api.github.com
overview
Package summary
Universal Command-Line Interface for Alibaba Cloud
Project links
Commands and aliases
- aliyun
history
Project history and usage
Alibaba Cloud CLI is Alibaba Cloud's open-source command-line interface for managing Alibaba Cloud resources through OpenAPI.
Project history
The public repository begins in git history on 2015-06-30. The current README describes the CLI as a Go tool built on top of Alibaba Cloud OpenAPI and distributed through GitHub releases, platform installers, a one-line installer, and package managers.
The changelog records a v0.1 entry dated 2018-01-11 with a Go refactoring, basic configuration, and automatic endpoint location. Later pre-v3 entries added richer configuration commands, authentication modes, completion, paging, ossutil integration, and v3.0.0 GA refactoring.
Adoption history
The README explicitly supports trying the CLI in Alibaba Cloud Shell before local installation, which gives it both a hosted-cloud and local-terminal path. It documents Homebrew installation, direct downloads for macOS, Linux, and Windows, and links to GitHub releases.
The input package-manager facts show broad downstream packaging: Homebrew, Nix, pacman, Scoop, winget, and zypper.
How it is used
Users normally start with aliyun configure, which writes profile data including credentials, region, output format, and language. The README documents authentication modes including AK, RAM role ARN, ECS RAM role, OIDC, external credential process, CredentialsURI, chainable RAM role ARN, and CloudSSO.
Once configured, the aliyun executable invokes Alibaba Cloud OpenAPI actions and product commands from the terminal, with troubleshooting support tied to RequestID or error messages.
Why package nerds care
aliyun-cli is the canonical terminal entry point for Alibaba Cloud automation. For package maintainers, it is a multi-platform cloud CLI with real credential storage, release assets, shell completion, and frequent cloud-service surface changes.
Timeline
- 2015: Public Git history begins.
- 2018: Changelog records v0.1 with Go refactoring and basic configuration.
- 2018: v3.0.1 tag exists in repository history.
- 2026: v3.4.2 tag appears in repository history.
Related projects
- Alibaba Cloud OpenAPI: service interface layer used by the CLI.
- ossutil: object-storage toolset integrated according to the changelog.
Sources
- Git history from https://github.com/aliyun/aliyun-cli.git
- Official README: https://raw.githubusercontent.com/aliyun/aliyun-cli/master/README.md
- Official changelog: https://raw.githubusercontent.com/aliyun/aliyun-cli/master/CHANGELOG.md
- source_facts.package-manager
security posture
Risk level: orange
infrastructure mutation or orchestration signal.
Risk classifier
orange risk · medium confidence · infrastructure
Why
- infrastructure mutation or orchestration signal
Signals
- text:cloud
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 6 platform targets.
- Build metadata lists 1 build dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
~/.aliyun/config.json
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
~/.aliyun/config.json
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
aliyun | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-07-08
manager version3.4.5
manager updated2026-07-07
local dataok
upstreamcurrent
latest detectedv3.4.5
https://github.com/aliyun/aliyun-cli
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:aliyun-cli |
|---|---|
| Version | 3.4.5 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/aliyun-cli |
| Homepage | https://github.com/aliyun/aliyun-cli |
| Repository | https://github.com/aliyun/aliyun-cli |
| Upstream docs | https://github.com/aliyun/aliyun-cli |
| License | Apache-2.0 |
| Source archive | https://github.com/aliyun/aliyun-cli/archive/refs/tags/v3.4.5.tar.gz |
| Last updated | 2026-07-07T15:33:34Z |
| Pulse | updated |
| Build dependencies | go |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | aliyun-cli |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Nix95%
aliyun-cli
nix profile install nixpkgs#aliyun-cli- normalized package name match
- Matched by: Aliyun Cli
pacman95%
aliyun-cli 3.3.22-1
Alibaba Cloud CLI
https://github.com/aliyun/aliyun-cli
sudo pacman -S aliyun-cli- License: Apache-2.0
- Architecture: x86_64
- 1 dependencies
- normalized package name match
- Matched by: Aliyun Cli
zypper95%
aliyun-cli 3.3.22-1.1
Alibaba Cloud CLI
https://github.com/aliyun/aliyun-cli
sudo zypper install aliyun-cli- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: aliyun-cli
- 1 provides
- normalized package name match
- Matched by: Aliyun Cli
winget95%
Alibaba.AlibabaCloudCLI
winget install --id Alibaba.AlibabaCloudCLI -e- normalized package name match
- Matched by: Aliyun Cli
Scoop92%
main/aliyun
scoop install main/aliyun- installed executable or alias match
- Matched by: Aliyun
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated agent safety answer
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment