Package manager source
Homebrew metadata was not linked in local data.
brew package intelligence
Install tshu-w/malt/ossutil
Automic Vault tracks tshu-w/malt/ossutil because plain text alibaba cloud oss credentials matters when AI agents run command-line tools on macOS.
install
Install command
shell
brew install tshu-w/malt/ossutilPlatform notes
- No package-specific platform notes were present.
overview
Package summary
This package is present in local Automic Vault package data. The page is generated so package-specific security metadata has a stable URL.
Homepage
Not present in the local metadata.
Commands and aliases
No executable aliases were found in the local package database.
radioisotope
Plain Text Alibaba Cloud OSS Credentials
ossutil stores Alibaba Cloud OSS access credentials in ~/.ossutilconfig by default. Our isotope stores that config in the macOS keychain and points `ossutil` at a temporary config file only while the wrapper runs.
Local README excerpt
ossutil radioisotope
ossutil stores Alibaba Cloud OSS credentials in ~/.ossutilconfig by default. The config can include accessKeySecret and stsToken values in plaintext.
This radioisotope migrates the default config into the Automic Vault keychain and wraps ossutil so it reads a temporary config file only while it is running.
The source config file is rewritten with blank secret values so long-lived secrets and temporary tokens are not left in plaintext on disk.
Implemented from the Homebrew popularity scan at formula version 2.3.0.
Caveats
- We currently migrate the default
~/.ossutilconfigfile only. - Explicit
-cor--config-filearguments can override the temporary file. - Settings changes made while
ossutilruns are written to the temporary
config and are not persisted back to the keychain.
- Direct execution of the original binary will not receive credentials.
Source: data/radioisotopes/ossutil/README.md
Coverage source
https://github.com/tshu-w/homebrew-malt/blob/HEAD/Formula/ossutil.rb
Caveats
- We currently migrate the default ~/.ossutilconfig file only.
- Explicit -c or --config-file arguments can override the temporary file.
- Settings changes made while ossutil runs are not persisted back to keychain.
- Direct execution of the original binary will not receive credentials.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
| No executable data was present. | |||
install metadata
Package metadata
| Package key | brew:tshu-w/malt/ossutil |
|---|---|
| Package manager | Homebrew |
source trail
Generated from repository data
This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.
Used sources
- local isotope README
- radioisotope security manifest