Automic Vault

brew package intelligence

glab

Automic Vault tracks glab because plain text gitlab tokens matters when AI agents run command-line tools on macOS.

overview

What Automic Vault knows about glab

Open-source GitLab command-line tool

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text GitLab Tokens

GLab stores personal access tokens and OAuth refresh tokens in its config.yml file. Our isotope stores that config file in the macOS keychain and exposes it through a temporary GLAB_CONFIG_DIR only while `glab` runs.

Local README excerpt

GLab Radioisotope

GLab stores GitLab personal access tokens and OAuth refresh tokens in its config.yml file. By default this can live under the legacy ~/.config/glab-cli location or the platform XDG config location.

This radioisotope migrates the first default GLab config file containing a token into the macOS keychain and wraps glab so it receives the config through a temporary GLAB_CONFIG_DIR while it runs.

Caveats

  • We currently migrate the first default global config.yml containing a

token.

  • Local .git/glab-cli/config.yml files are not migrated.
  • Direct execution of the original binary will not receive credentials.

Source: data/radioisotopes/glab/README.md

Caveats

  • We currently migrate the first default global config.yml containing a token.
  • Local .git/glab-cli/config.yml files are not migrated.
  • Direct execution of the original binary will not receive credentials.

install metadata

Resolver facts

Package keybrew:glab
Last updated2026-05-20T21:49:15Z
Pulseupdated

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

  • Nucleus package database
  • local isotope README
  • radioisotope security manifest