Automic VaultAutomic Vault

brew

Install kekkai with Homebrew

File integrity monitoring tool. Version 0.2.9 via Homebrew; verified 2026-06-28.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified ยท 100%
brew install kekkai

local Homebrew formula metadata

overview

Package summary

File integrity monitoring tool

Commands and aliases

  • kekkai

history

Project history and usage

Kekkai is a Go file-integrity monitoring CLI that records content hashes during deployment and verifies them later to detect unauthorized file changes.

Project history

The project was created on GitHub on 2025-08-12 by catatsuy. Its README presents it as a production-server tool designed around content-only hashing, immutable exclude rules, symlink-aware checks, and optional manifest storage in Amazon S3.

Adoption history

Kekkai is a young, specialized security utility. By 2026-07-01, Homebrew formula metadata listed v0.2.9, and GitHub API metadata reported 132 stars and one fork.

How it is used

The typical workflow is to generate a manifest for a deployed application directory, store it locally or in S3, and run periodic verification from cron or monitoring systems. The README emphasizes excluding only generated files such as logs, caches, uploads, and NFS mounts.

Why package nerds care

Kekkai is notable as a small single-binary alternative to heavier file-integrity stacks. It packages a deliberately narrow deployment-time manifest model that fits immutable-server and cloud-IAM workflows.

Timeline

  • 2025-08-12: GitHub repository created.
  • 2026-01-03: v0.2.0 release published.
  • 2026-06-28: v0.2.9 release published.
  • 2026-07-01: Homebrew formula metadata listed kekkai v0.2.9.

Related projects

  • Amazon S3 is used as the recommended secure manifest store.
  • Traditional tools such as tar and rsync are named by the README as less suitable comparisons for this content-hash use case.

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for kekkai. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
kekkaicliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version0.2.9
manager updated2026-06-28
local dataok
upstreamcurrent
latest detectedv0.2.9

https://github.com/catatsuy/kekkai

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:kekkai
Version0.2.9
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/kekkai
Homepagehttps://github.com/catatsuy/kekkai
Repositoryhttps://github.com/catatsuy/kekkai
Upstream docshttps://github.com/catatsuy/kekkai#readme
LicenseMIT
Source archivehttps://github.com/catatsuy/kekkai/archive/refs/tags/v0.2.9.tar.gz
Last updated2026-06-28T09:45:02Z
Pulseupdated
Build dependenciesgo
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namekekkai
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • goBuild dependency declared by Homebrew.

Same workflow

  • aideShares av.db curated category or tags: cli, file-integrity, monitoring, security.
  • bettercapShares av.db curated category or tags: cli, monitoring, security.
  • logcheckShares av.db curated category or tags: cli, monitoring, security.
  • md5deepShares av.db curated category or tags: cli, file-integrity, security.
  • osctrl-cliShares av.db curated category or tags: cli, monitoring, security.
  • rhashShares av.db curated category or tags: cli, file-integrity, security.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • package relationship graph
  • package version freshness
  • package-page enrichment