Automic Vault

brew package intelligence

minio/stable/mc

Automic Vault tracks minio/stable/mc because plain text minio client alias secrets matters when AI agents run command-line tools on macOS.

Read docs Run scanner

overview

What Automic Vault knows about minio/stable/mc

This package is present in local Automic Vault package data. The page is generated so package-specific security metadata has a stable URL.

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text MinIO Client Alias Secrets

The MinIO Client stores aliases in ~/.mc/config.json. Those aliases can contain secretKey and sessionToken values for S3-compatible storage. Our isotope stores that config file in the macOS keychain and exposes it through a temporary --config-dir only while `mc` runs.

Local README excerpt

MinIO mc Radioisotope

The MinIO Client stores server aliases in ~/.mc/config.json. Those aliases can include S3-compatible access keys, secret keys, and session tokens. Automic Vault migrates that config JSON into the macOS keychain and injects it through a temporary --config-dir only while mc runs.

This keeps package-owned local object-storage credentials out of plaintext home-directory config without changing normal mc commands.

Caveats

  • Runtime alias/config changes are not persisted back to the keychain.
  • Explicit --config-dir arguments can override the temporary injected config.
  • Direct execution of the original binary will not receive credentials.

Source: data/radioisotopes/minio-mc/README.md

Caveats

  • Runtime alias/config changes are not persisted back to the keychain.
  • Explicit --config-dir arguments can override the temporary config directory.
  • Direct execution of the original binary will not receive credentials.

install metadata

Resolver facts

Package keybrew:minio/stable/mc

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

  • local isotope README
  • radioisotope security manifest