Automic Vault

brew package intelligence

mysql@8.4

Automic Vault tracks mysql@8.4 because plain text mysql client passwords matters when AI agents run command-line tools on macOS.

Read docs Run scanner

overview

What Automic Vault knows about mysql@8.4

Open source relational database management system

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text MySQL Client Passwords

MySQL client tools read ~/.my.cnf, which commonly stores database passwords as plaintext option-file entries. Our isotope stores that option file in the macOS keychain and passes it as a temporary --defaults-extra-file only while MySQL client commands run.

Local README excerpt

MySQL 8.4 Radioisotope

MySQL client tools read option files such as ~/.my.cnf. Those files often contain plaintext password = ... entries for the [client] group.

This radioisotope migrates the default user option file into the macOS keychain and wraps common MySQL client launchers so they receive the option file through a temporary --defaults-extra-file while they run.

Caveats

  • We currently migrate the default ~/.my.cnf file only.
  • Existing option files are not merged with generated temporary files.
  • Direct execution of the original binaries will not receive credentials.

Source: data/radioisotopes/mysql@8.4/README.md

Caveats

  • We currently migrate the default ~/.my.cnf file only.
  • Existing option files are not merged with generated temporary files.
  • Direct execution of the original binaries will not receive credentials.

install metadata

Resolver facts

Package keybrew:mysql@8.4
Last updated2026-05-21T21:54:10Z
Pulseupdated

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

  • Nucleus package database
  • local isotope README
  • radioisotope security manifest