Automic VaultAutomic Vault

brew

Install crane with Homebrew, apk, pacman, zypper

Tool for interacting with remote images and registries. Version 0.21.7 via Homebrew; verified 2026-06-18.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install crane

local Homebrew formula metadata

overview

Package summary

Tool for interacting with remote images and registries

Commands and aliases

  • crane

history

Project history and usage

crane is the command-line front end in Google's go-containerregistry project for working with remote container images and registries. It sits beside the Go library APIs and exposes common registry operations as shell commands.

Project history

The go-containerregistry repository was created in 2018 as a Go library and set of CLIs for container registry work. Its README describes the library as largely based on Google's earlier Python containerregistry library and explains that crane, gcrane, and krane are tools built on top of the shared registry primitives.

The crane README documents direct binary releases, Go installation, Homebrew, Arch Linux, GitHub Actions setup, and a container image form of the tool. The project published a v0.1.0 GitHub release in 2020 and was still publishing releases in 2026.

Adoption history

crane became common packaging material because it is useful without a Docker daemon: scripts can copy, tag, inspect, authenticate to, and move images directly against registries. Official installation instructions explicitly cover Homebrew, Arch Linux, release tarballs, Go install, and containerized usage.

How it is used

Package users reach for crane for registry automation: pulling and pushing images, copying between registries, tagging images in CI, listing tags, and authenticating to registries. The go-containerregistry README maps examples such as crane pull, crane push, and crane cp to library-level remote and tarball operations.

Why package nerds care

For package maintainers, crane is a small, single-purpose registry CLI with signed release artifacts and documented SLSA provenance verification. That makes it attractive in build pipelines where installing a full container engine would be unnecessary overhead.

Timeline

  • 2018: google/go-containerregistry repository created.
  • 2020: v0.1.0 release published.
  • 2026: v0.21.7 release published.

Related projects

  • go-containerregistry also includes gcrane, a GCR-oriented variant, and krane, a Kubernetes-workload-identity-aware drop-in replacement. The README notes that ko originally lived in the repository before moving to its own project.

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for crane. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.docker/config.json${DOCKER_CONFIG}/config.json${XDG_RUNTIME_DIR}/containers/auth.json
Windows
%USERPROFILE%\.docker\config.json

executables

Installed executables

CommandKindExposureNote
cranecliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version0.21.7
manager updated2026-06-18
local dataok
upstreamcurrent
latest detectedv0.21.7

https://github.com/google/go-containerregistry

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:crane
Version0.21.7
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/crane
Homepagehttps://github.com/google/go-containerregistry
Repositoryhttps://github.com/google/go-containerregistry
Upstream docshttps://github.com/google/go-containerregistry/blob/main/cmd/crane/recipes.md
LicenseApache-2.0
Source archivehttps://github.com/google/go-containerregistry/archive/refs/tags/v0.21.7.tar.gz
Last updated2026-06-18T00:54:03Z
Pulseupdated
Build dependenciesgo
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecrane
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

apk95%

crane 0.21.6-r0

tool for interacting with remote images and registries

https://github.com/google/go-containerregistry/tree/main/cmd/crane

sudo apk add crane
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: crane
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Crane
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: crane from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
pacman95%

crane 0.21.6-1

Interacting with remote container images and registries.

https://github.com/google/go-containerregistry

sudo pacman -S crane
  • License: Apache-2.0
  • Architecture: x86_64
  • 1 dependencies
  • normalized package name match
  • Matched by: Crane
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: crane from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

crane 0.21.3-1.2

CLI tool for interacting with remote images and registries

https://github.com/google/go-containerregistry

sudo zypper install crane
  • License: Apache-2.0
  • Category: System/Management
  • Architecture: x86_64
  • Source Package: go-containerregistry
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Crane
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: crane from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment