macOS
brew install otterdoglocal Homebrew formula metadata
brew
Manage GitHub organizations at scale using an infrastructure as code approach. Version 1.4.0 via Homebrew; verified 2026-07-25.
install
brew install otterdoglocal Homebrew formula metadata
overview
Manage GitHub organizations at scale using an infrastructure as code approach
history
Eclipse Otterdog is a Python CLI for managing GitHub organizations with a configuration-as-code workflow. It models organization and repository settings in a configuration repository, lets project teams propose changes by pull request, and applies approved changes to GitHub.
Otterdog was developed by the Eclipse Foundation security team to manage GitHub organizations at scale. Eclipse documentation describes it as infrastructure as code for GitHub organizations, with configuration stored in each enabled organization's repository and changes applied with the otterdog CLI.
The project moved from Eclipse's GitLab namespace to the eclipse-csi GitHub organization; the old GitLab page marks that repository obsolete and points new development to GitHub. The GitHub README describes Otterdog as a tool the Eclipse Foundation uses for numerous GitHub-hosted projects.
A May 2023 Eclipse JDT mailing-list post explains the rollout motivation: project leads can submit configuration PRs, automated feedback describes planned changes, Eclipse security staff approve and apply them, and the setup helps monitor security-related organization settings at scale while reducing help-desk load.
The public eclipse-csi/.eclipsefdn configuration repository and dashboard show Otterdog's self-service model in practice: configuration lives in a repository, documentation points contributors to Otterdog, and a dashboard exposes the effective configuration and a Jsonnet playground.
Administrators install the CLI, define an otterdog.jsonnet or otterdog.json configuration, connect organization credentials through plain, pass, or Bitwarden-backed providers, and run operations such as import, plan, apply, validate, fetch-config, push-config, show-live, and list-members.
Non-administrator project contributors usually interact with Otterdog through pull requests against the configuration repository. That workflow makes GitHub settings reviewable and auditable in the same style as infrastructure code.
otterdog is notable because it packages GitHub organization governance as a CLI instead of a dashboard-only process. For package nerds, it is a concrete example of configuration-as-code moving upward from servers and clusters into source-hosting administration.
security posture
infrastructure mutation or orchestration signal.
orange risk · medium confidence · infrastructure
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
./otterdog.jsonnet./otterdog.json$OTTERDOG_CONFIG_ROOT/otterdog.jsonnet$OTTERDOG_CONFIG_ROOT/otterdog.jsonCredential-bearing paths to review before unattended agent runs.
./otterdog.jsonnet./otterdog.jsonexecutables
| Command | Kind | Exposure | Note |
|---|---|---|---|
otterdog | cli | global executable |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
https://otterdog.readthedocs.io/en/latest/
install metadata
| Package key | brew:otterdog |
|---|---|
| Version | 1.4.0 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/otterdog |
| Homepage | https://otterdog.readthedocs.io/en/latest/ |
| Repository | https://github.com/eclipse-csi/otterdog |
| Upstream docs | https://github.com/eclipse-csi/otterdog#readme |
| License | EPL-2.0 |
| Source archive | https://files.pythonhosted.org/packages/19/88/fffe8ad66be0149d1f34ec12bdd8abb3dde467b4780746cede544d83b26c/otterdog-1.4.0.tar.gz |
| Last updated | 2026-07-25T18:28:48Z |
| Pulse | updated |
| Dependencies | certifi, cryptography, libsodium, node, python@3.14, rpds-py |
| Build dependencies | rust |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | otterdog |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.