Automic VaultAutomic Vault

brew

Install cycode with Homebrew

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning. Version 3.17.0 via Homebrew; verified 2026-07-07.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified ยท 100%
brew install cycode

local Homebrew formula metadata

overview

Package summary

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning

Commands and aliases

  • cycode

history

Project history and usage

Cycode CLI is a local and CI-oriented security scanner for Cycode users, covering secrets, infrastructure-as-code misconfigurations, SCA vulnerabilities, and SAST findings.

Project history

The cycode-cli repository was created in July 2022 and published early releases later that year. Its README has grown from a scanner guide into a broader command-line manual covering authentication, configuration, pre-commit and pre-push hooks, repository and path scans, SBOM reports, and an experimental MCP server.

Adoption history

Official installation paths include PyPI, Homebrew, and GitHub Releases, which lets teams choose between Python packaging, macOS package management, and standalone executables. The README also documents pre-commit integration, making the CLI part of developer workflow rather than only a central CI scanner.

How it is used

Users authenticate with cycode auth, cycode configure, or environment variables, then run scans over repositories, paths, commit history, pre-commit, or pre-push contexts. The CLI stores global credentials and URLs under the user's .cycode directory and local ignore rules in .cycode/config.yaml where scans are run.

Why package nerds care

For package maintainers, Cycode CLI is a security SaaS client with real local state: packaging needs to expose the cycode executable cleanly while leaving credentials, service URLs, and ignore-rule config in user- or project-owned YAML files.

Timeline

  • 2022: Repository created and early 0.1.x releases published.
  • 2023: 0.2.x releases continued the CLI line.
  • 2026: 3.x releases remained active with scanner and workflow features documented in the README.

Related projects

  • The CLI integrates with pre-commit and with Cycode's hosted service through client credentials, OIDC tokens, and Cycode API and app URLs.

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for cycode. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 6 runtime dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.cycode/config.yaml./.cycode/config.yaml

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.cycode/credentials.yaml

executables

Installed executables

CommandKindExposureNote
cycodecliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version3.17.0
manager updated2026-07-07
local dataok
upstreamnot checked
latest detectednot detected

https://github.com/cycodehq/cycode-cli

install metadata

Package metadata

Package keybrew:cycode
Version3.17.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/cycode
Homepagehttps://github.com/cycodehq/cycode-cli
Repositoryhttps://github.com/cycodehq/cycode-cli
Upstream docshttps://github.com/cycodehq/cycode-cli#readme
LicenseMIT
Source archivehttps://files.pythonhosted.org/packages/32/a0/3a7fc8e4cbc2e4357e0068f6c10c9de00fb621d395a319430deb267d65bf/cycode-3.17.0.tar.gz
Last updated2026-07-07T09:59:01Z
Pulseupdated
Dependenciescertifi, cryptography, libyaml, pydantic, python@3.14, rpds-py
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecycode
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

Same workflow

  • ggshieldShares av.db curated category or tags: cli, devsecops, secrets-scanning, security.
  • gotestwafShares av.db curated category or tags: application-security, cli, security.
  • interceptShares av.db curated category or tags: cli, devsecops, sast, security.
  • sqlmapShares av.db curated category or tags: application-security, cli, security.
  • bomberShares av.db curated category or tags: cli, devsecops, security.
  • cdxgenShares av.db curated category or tags: cli, sca, security.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • package relationship graph
  • package version freshness
  • package-page enrichment