Automic Vault

brew package intelligence

doctl

Automic Vault tracks doctl because plain text digitalocean tokens matters when AI agents run command-line tools on macOS.

Read docs Run scanner

overview

What Automic Vault knows about doctl

Command-line tool for DigitalOcean

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text DigitalOcean Tokens

doctl stores DigitalOcean access tokens in config.yaml for the default context and named auth contexts. Our isotope stores the config in the macOS keychain and injects it through a temporary DIGITALOCEAN_CONFIG while `doctl` runs.

Local README excerpt

doctl Radioisotope

doctl auth init stores DigitalOcean access tokens in config.yaml. The radioisotope moves that config into the macOS keychain and provides it through a temporary DIGITALOCEAN_CONFIG path while doctl runs.

Caveats

  • The migration detects top-level access-token and auth-contexts token

values.

  • Configuration changes made by doctl auth init, auth switch, or config

commands happen in the temporary runtime config and are not persisted back to the keychain.

  • Direct execution of the original binary will not receive credentials.

Source: data/radioisotopes/doctl/README.md

Caveats

  • Only the default config path and explicit DIGITALOCEAN_CONFIG are migrated.
  • Configuration changes made by doctl auth/config commands are not persisted.
  • Direct execution of the original binary will not receive credentials.

install metadata

Resolver facts

Package keybrew:doctl
Last updated2026-05-14T18:00:31Z
Pulseupdated

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

  • Nucleus package database
  • local isotope README
  • radioisotope security manifest