Automic Vault

brew package intelligence

podman

Automic Vault tracks podman because plain text registry credentials matters when AI agents run command-line tools on macOS.

Read docs Run scanner

overview

What Automic Vault knows about podman

Tool for managing OCI containers and pods

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text Registry Credentials

Podman registry logins are stored in containers auth.json files that can contain base64 credentials or identity tokens. Our isotope stores that auth file in the macOS keychain and exposes it through a temporary REGISTRY_AUTH_FILE only while `podman` runs.

Local README excerpt

Podman Radioisotope

Podman stores registry login credentials in a containers auth.json file. Those entries can include base64 auth values or identity tokens for container registries.

This radioisotope migrates the first default user auth file it finds into the macOS keychain and rewrites the auth file to non-secret credHelpers entries. The wrapper places a temporary docker-credential-av-podman shim on PATH and allows Podman to fetch credentials through av credential-helper podman.

Caveats

  • We currently migrate default user auth files only.
  • Explicit --authfile arguments can bypass the helper-backed auth file.
  • Direct execution of the original binary will not receive the helper shim.

Source: data/radioisotopes/podman/README.md

Caveats

  • We currently migrate default user auth files only.
  • Explicit --authfile arguments can override the temporary auth file.
  • Direct execution of the original binary will not receive credentials.

install metadata

Resolver facts

Package keybrew:podman
Last updated2026-05-10T22:44:36-04:00
Pulseupdated

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

  • Nucleus package database
  • local isotope README
  • radioisotope security manifest