# Install lacework-cli with Homebrew

CLI for managing Lacework. Version 2.14.1 via Homebrew; verified 2026-06-23.

## Install

```sh
sudo av install brew:lacework-cli
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install lacework-cli
```

  Evidence: local Homebrew formula metadata

## Package facts

- **Package key:** brew:lacework-cli
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/lacework-cli>
- **Version:** 2.14.1
- **Source summary:** CLI for managing Lacework
- **Homepage:** <https://docs.lacework.com/cli>
- **Repository:** <https://github.com/lacework/go-sdk>
- **Upstream docs:** <https://docs.lacework.net/cli>
- **License:** Apache-2.0
- **Source archive:** <https://github.com/lacework/go-sdk.git>
- **Last updated:** 2026-06-23T21:37:21Z
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- lacework (cli)
- lacework (alias)

## Build dependencies

- go

## Install behavior

- Post-install hook: not defined
- Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 2.14.1
- Package-manager updated: 2026-06-23
- Local data: ok
- Upstream repository: https://github.com/lacework/go-sdk
- info: No cached GitHub release or tag data was available.
## Project history and usage

Lacework CLI is the command-line interface for managing the Lacework cloud security platform. It is shipped from the Lacework Go SDK repository alongside Go client libraries, config helpers, an updater, and API examples.

The tool is service-specific, but it has package-manager significance because cloud-security teams use it for compliance reports, cloud integrations, vulnerability scans, API access, and automation around Lacework accounts.

### Project history

The go-sdk repository states that it provides tools, libraries, documentation, samples, and guides for interacting with the Lacework platform. The CLI sits under that repository as the user-facing command-line layer.

The CLI README documents cross-platform installation through shell scripts, PowerShell, Homebrew, Chocolatey, and Azure Cloud Shell. Development examples in the same README show a 0.1.1-dev build string from April 2020, placing the CLI's public development era in the early Lacework automation period.

### Adoption history

Adoption follows Lacework platform usage rather than a general open source community. The CLI stores account, API key, and secret configuration in `$HOME/.lacework.toml`, supports profiles and environment variables, and exposes commands that match Lacework operational areas.

The release feed and release notes show continued packaging of signed binaries and Docker images, including v2.x release artifacts for macOS, Linux, Windows, and container workflows.

### How it is used

Users run `lacework configure` to create a profile, then use commands such as `lacework cloud-account list`, `lacework events list`, `lacework vulnerability container scan`, and `lacework api get /schemas`.

For automation, the CLI can read `LW_` environment variables, switch profiles, disable interactivity, emit JSON, and run in cloud shell or CI contexts where API keys are provided by the environment.

### Why package nerds care

The package is a representative vendor CLI: the local binary is small, but it encodes a cloud platform's API, credential conventions, profile model, and release cadence.

Its presence in Homebrew also shows how security platforms meet users where operational scripts live, with packaged binaries, checksums, Docker images, and shell-install fallbacks.

### Timeline

- 2020: CLI development examples showed a 0.1.1-dev build string and Makefile install flow.
- 2020: The repository copyright and SDK documentation identified Lacework Inc. as steward of the Go SDK and CLI code.
- 2020s: The CLI documented Homebrew, Chocolatey, Bash, PowerShell, Azure Cloud Shell, and Docker installation paths.
- 2026: v2.14.1 release artifacts included signed platform archives and a Docker image.

### Related projects

- The Lacework Go API client, lwconfig, lwupdater, and lwdomain packages live in the same repository and support the CLI's platform interaction model.
- The Lacework Terraform provider and other Lacework SDKs are adjacent automation surfaces for the same cloud-security platform.
- Docker images for `lacework/lacework-cli` provide an alternative packaging path for CI and ephemeral automation.

### Sources

- <https://docs.lacework.net/cli>
- <https://github.com/lacework/go-sdk>
- <https://github.com/lacework/go-sdk/releases>
- <https://raw.githubusercontent.com/lacework/go-sdk/main/README.md>
- <https://raw.githubusercontent.com/lacework/go-sdk/main/RELEASE_NOTES.md>
- <https://raw.githubusercontent.com/lacework/go-sdk/main/cli/README.md>


## Security Notes

No matching local secret-handling manifest was found for lacework-cli. Nucleus package metadata is still published here so future coverage has a stable package URL.



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ~/.lacework.toml

## Credential files

- Unix: ~/.lacework.toml
## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** lacework-cli
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable


## Related links

- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata.
- [Documentation packages](https://www.automicvault.com/pkg/documentation-tools/) - Matched documentation, manual, or publishing metadata.
- [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew.
- [cfripper](https://www.automicvault.com/pkg/brew/cfripper/) - Shares av.db curated category or tags: cli, cloud-security, security.
- [cliam](https://www.automicvault.com/pkg/brew/cliam/) - Shares av.db curated category or tags: cli, cloud-security, security.
- [cloudfox](https://www.automicvault.com/pkg/brew/cloudfox/) - Shares av.db curated category or tags: cli, cloud-security, security.
- [legitify](https://www.automicvault.com/pkg/brew/legitify/) - Shares av.db curated category or tags: cli, cloud-security, security.
- [parliament](https://www.automicvault.com/pkg/brew/parliament/) - Shares av.db curated category or tags: cli, cloud-security, security.
- [principalmapper](https://www.automicvault.com/pkg/brew/principalmapper/) - Shares av.db curated category or tags: cli, cloud-security, security.
- [prowler](https://www.automicvault.com/pkg/brew/prowler/) - Shares av.db curated category or tags: cli, cloud-security, security.
- [s3scanner](https://www.automicvault.com/pkg/brew/s3scanner/) - Shares av.db curated category or tags: cli, cloud-security, security.

## Combined YAML source

View the package source record on GitHub. [combined/lacework-cli.yml](https://github.com/automic-vault/db/blob/main/combined/lacework-cli.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated configuration and credential file locations
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- cross-ecosystem install command graph
