brew package intelligence

oci-cli

Automic Vault tracks oci-cli because plain text oci cli secrets matters when AI agents run command-line tools on macOS.

Read docs Run scanner

overview

What Automic Vault knows about oci-cli

Oracle Cloud Infrastructure CLI

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text OCI CLI Secrets

OCI CLI stores API config in ~/.oci/config and references local private key, security token, and delegation token files. It supports environment overrides for the config and credential file paths. Our isotope stores the config and referenced secret files in the macOS keychain and injects temporary files while `oci` runs.

Local README excerpt

OCI CLI Radioisotope

oci setup config writes OCI API configuration to ~/.oci/config, including references to private key files and optional token files. The radioisotope moves the config and the referenced secret file contents into the macOS keychain, then materializes temporary files while oci runs.

Caveats

Only the default config path and explicit OCI_CLI_CONFIG_FILE are migrated.
Profiles must reference at most one private key file, security token file, and

delegation token file.

Session-token refreshes and setup commands write to temporary runtime files

and are not persisted back to the keychain.

Direct execution of the original binary will not receive credentials.

Source: data/radioisotopes/oci-cli/README.md

Coverage source

https://formulae.brew.sh/formula/oci-cli

Caveats

Only the default config path and explicit OCI_CLI_CONFIG_FILE are migrated.
Profiles must reference at most one private key file, security token file, and delegation token file.
Session-token refreshes and setup commands are not persisted to keychain.
Direct execution of the original binary will not receive credentials.

install metadata

Resolver facts

Package key	brew:oci-cli
Last updated	2026-05-20T10:58:46Z
Pulse	updated

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

Nucleus package database
local isotope README
radioisotope security manifest