Automic VaultAutomic Vault

brew

Install assh with Homebrew, MacPorts, Nix

Advanced SSH config - Regex, aliases, gateways, includes and dynamic hosts. Version 2.17.2 via Homebrew; verified 2026-05-12.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install assh

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install assh

MacPorts ports tree · sysutils/assh/Portfile · source: api.github.com

Linux

Nixverified · 92%
nix profile install nixpkgs#assh

nixpkgs package indexes · pkgs/by-name/as/assh/package.nix · source: api.github.com

overview

Package summary

Advanced SSH config - Regex, aliases, gateways, includes and dynamic hosts

Commands and aliases

  • assh

history

Project history and usage

assh is a Go-based SSH configuration helper formerly known as Advanced SSH Config. Its niche is not replacing OpenSSH, but generating and wrapping OpenSSH configuration so regular SSH-dependent tools can use richer host aliases, regex-like matching, gateways, includes, templates, Graphviz output, JSON output, and YAML configuration.

Project history

The public GitHub repository dates to 2011 and the official project page describes the rename from Advanced SSH Config to assh. The README frames the tool as a transparent wrapper around SSH: lib-ssh uses assh as a ProxyCommand, so the generated behavior works through normal ssh, scp, rsync, git, and desktop tools that rely on SSH rather than through a separate protocol stack.

The project grew around pain points in large SSH estates: gateway chaining, dynamic hostnames, inherited host templates, generated known-host entries, and automatic regeneration of ~/.ssh/config. Its README also notes that OpenSSH 7.3 later gained native Include support, which is useful context for package maintainers because some early assh value moved into the base OpenSSH feature set while assh kept broader YAML/gateway/template behavior.

Adoption history

assh sits in the package-manager culture of personal infrastructure tools: the supplied Homebrew facts also list MacPorts and Nix packaging. Its README and project page emphasize integration with standard SSH consumers rather than a new client, which made it useful to developers and operators who wanted one enriched configuration layer to affect many existing commands.

How it is used

Typical use starts with ~/.ssh/assh.yml, optional split files under ~/.ssh/assh.d/*.yml, and generated ~/.ssh/config output. Package users mostly care about the executable because it can build or refresh OpenSSH config, graph the host topology, manage sockets, and let normal ssh invocations resolve aliases and gateway chains.

Why package nerds care

For package nerds, assh is an example of a small Unix-style wrapper with outsized workflow impact: it compiles declarative YAML into OpenSSH-native config, keeps compatibility with existing SSH tooling, and exposes enough introspection output to make SSH inventories scriptable. Its config-path defaults are also important because installing the package can affect a user's core ~/.ssh/config workflow.

Timeline

  • 2011: moul/assh repository created on GitHub.
  • 2016: OpenSSH 7.3 added native Include support, later noted in assh's README as overlapping with one assh configuration feature.
  • 2026: GitHub repository metadata showed continued activity and the README still documented assh as an SSH wrapper/config generator.

Related projects

  • OpenSSH provides the ssh client, ~/.ssh/config, and ProxyCommand behavior that assh generates around.
  • Graphviz is used by assh for host graph output.
  • Other SSH inventory and config-management tools overlap with assh's generated-configuration use case, but assh's official docs emphasize staying compatible with ssh, scp, rsync, git, and lib-ssh consumers.

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for assh. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.ssh/assh.yml~/.ssh/assh.d/*.yml/etc/assh.yml~/.ssh/config

executables

Installed executables

CommandKindExposureNote
asshcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version2.17.2
manager updated2026-05-12
local dataok
upstreamcurrent
latest detectedv2.17.2

https://github.com/moul/assh

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:assh
Version2.17.2
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/assh
Homepagehttps://v1.manfred.life/assh/
Repositoryhttps://github.com/moul/assh
Upstream docshttps://github.com/moul/assh#readme
LicenseMIT
Source archivehttps://github.com/moul/assh/archive/refs/tags/v2.17.2.tar.gz
Last updated2026-05-12T16:18:23Z
Pulseupdated
Build dependenciesgo
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameassh
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

assh

nix profile install nixpkgs#assh
  • normalized package name match
  • Matched by: Assh
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/as/assh/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
MacPorts95%

assh

sudo port install assh
  • normalized package name match
  • Matched by: Assh
MacPorts ports tree · api.github.com · MacPorts ports tree: sysutils/assh/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment