Automic Vault

brew package intelligence

opentofu

Automic Vault tracks opentofu because plain text opentofu cloud tokens matters when AI agents run command-line tools on macOS.

Read docs Run scanner

overview

What Automic Vault knows about opentofu

Drop-in replacement for Terraform. Infrastructure as Code Tool

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text OpenTofu Cloud Tokens

OpenTofu stores API tokens for remote registries and OpenTofu-compatible services in ~/.terraform.d/credentials.tfrc.json. Our isotope stores that credentials file in the macOS keychain and exposes it through a temporary TF_CLI_CONFIG_FILE only while Homebrew core's tofu binary runs.

Local README excerpt

opentofu Radioisotope

OpenTofu stores API tokens for remote registries and OpenTofu-compatible services in ~/.terraform.d/credentials.tfrc.json.

This radioisotope covers Homebrew core's opentofu formula. It migrates that credentials file into the Automic Vault keychain, installs an OpenTofu credentials helper shim, and wraps OpenTofu so TF_CLI_CONFIG_FILE points at a temporary helper configuration only while OpenTofu is running.

Caveats

  • We currently migrate credentials.tfrc.json only.
  • Existing .terraformrc settings are not merged into the temporary file.
  • Direct execution of the original binary will not receive the helper config.

Source: data/radioisotopes/opentofu/README.md

Caveats

  • We currently migrate credentials.tfrc.json only.
  • Existing .terraformrc settings are not merged into the temporary file.
  • Direct execution of the original binary will not receive credentials.

install metadata

Resolver facts

Package keybrew:opentofu
Last updated2026-05-14T18:02:34Z
Pulseupdated

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

  • Nucleus package database
  • local isotope README
  • radioisotope security manifest