Automic Vault

brew package intelligence

nuget

Automic Vault tracks nuget because plain text nuget config secrets matters when AI agents run command-line tools on macOS.

overview

What Automic Vault knows about nuget

Package manager for Microsoft development platform including .NET

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text NuGet Config Secrets

NuGet stores package source credentials, API keys, proxy passwords, and client certificate passwords in user-level NuGet.Config files. Our isotope stores the user NuGet.Config files in the macOS keychain and exposes them through a temporary HOME and XDG_CONFIG_HOME while `nuget` runs.

Local README excerpt

nuget

NuGet stores package source credentials, API keys, proxy passwords, and client certificate passwords in user-level NuGet.Config files.

This radioisotope migrates the default Mono and .NET user-level NuGet config files to the keychain. Package source credentials are split out for av credential-helper nuget, while API keys, proxy passwords, and client certificate passwords remain in sanitized temporary config files because NuGet's credential provider protocol does not cover those secret types.

Source: data/radioisotopes/nuget/README.md

Caveats

  • Only the default Mono and .NET user-level NuGet.Config files are migrated.
  • Additional files under the user NuGet config directory are not migrated.
  • Runtime changes to migrated config files are not persisted back to keychain.
  • Direct execution of the original binary will not receive credentials.

install metadata

Resolver facts

Package keybrew:nuget
Last updated2026-05-14T02:59:39Z
Pulseupdated

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

  • Nucleus package database
  • local isotope README
  • radioisotope security manifest