Automic Vault

brew package intelligence

atlassian/acli/acli

Automic Vault tracks atlassian/acli/acli because plain text atlassian cli tokens matters when AI agents run command-line tools on macOS.

Read docs Run scanner

overview

What Automic Vault knows about atlassian/acli/acli

This package is present in local Automic Vault package data. The page is generated so package-specific security metadata has a stable URL.

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text Atlassian CLI Tokens

Atlassian CLI stores authenticated product profiles in YAML config files under ~/.config/acli. Our isotope stores the ACLI config set in the macOS keychain and injects it through a temporary HOME while `acli` runs.

Local README excerpt

Atlassian CLI Radioisotope

Atlassian CLI stores product authentication profiles in YAML files under ~/.config/acli. Authenticated profiles can include API tokens, OAuth access tokens, refresh tokens, and client secrets.

The radioisotope moves the ACLI config files into the macOS keychain when any token-bearing config is present and runs acli with a temporary HOME containing the injected config set.

Caveats

  • Only the current ~/.config/acli YAML config layout is migrated.
  • Runtime login/logout/profile changes happen in temporary runtime state and

are not persisted back to the keychain.

  • The wrapper runs ACLI with a temporary HOME.
  • Direct execution of the original binary will not receive credentials.

Source: data/radioisotopes/acli/README.md

Caveats

  • Only the current ~/.config/acli YAML config layout is migrated.
  • Runtime login/logout/profile changes are not persisted back to keychain.
  • The wrapper runs ACLI with a temporary HOME.
  • Direct execution of the original binary will not receive credentials.

install metadata

Resolver facts

Package keybrew:atlassian/acli/acli

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

  • local isotope README
  • radioisotope security manifest