Automic Vault

brew package intelligence

snowflake-cli

Automic Vault tracks snowflake-cli because plain text snowflake passwords matters when AI agents run command-line tools on macOS.

Read docs Run scanner

overview

What Automic Vault knows about snowflake-cli

CLI for snowflake

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text Snowflake Passwords

Snowflake CLI stores named connections in config.toml or connections.toml, and those files can contain plaintext passwords. Our isotope stores the active config files in the macOS keychain and injects them into a temporary SNOWFLAKE_HOME only while `snow` runs.

Local README excerpt

snowflake-cli Radioisotope

Snowflake CLI stores named connections in config.toml or connections.toml, and those files can contain plaintext passwords.

This radioisotope migrates the active Snowflake CLI config files into the Automic Vault keychain and wraps snow so it reads them from a temporary SNOWFLAKE_HOME only while the CLI is running.

The source files are rewritten with blank password values so plaintext credentials are not left on disk.

Caveats

  • We currently migrate one default Snowflake config directory at a time.
  • Only password-style secrets are blanked during migration.
  • Explicit --config-file arguments can override the temporary directory.
  • Settings changes made while snow runs are written to the temporary config

and are not persisted back to the keychain.

  • Direct execution of the original binary will not receive credentials.

Source: data/radioisotopes/snowflake-cli/README.md

Caveats

  • We currently migrate one default Snowflake config directory at a time.
  • Only password-style secrets are blanked during migration.
  • Explicit --config-file arguments can override the temporary directory.
  • Settings changes made while snow runs are not persisted back to keychain.
  • Direct execution of the original binary will not receive credentials.

install metadata

Resolver facts

Package keybrew:snowflake-cli
Last updated2026-05-21T07:48:00Z
Pulseupdated

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

  • Nucleus package database
  • local isotope README
  • radioisotope security manifest