# Install yor with Homebrew, Nix Extensible auto-tagger for your IaC files. Version 0.1.200 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:yor ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install yor ``` Evidence: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#yor ``` Evidence: nixpkgs package indexes: pkgs/by-name/yo/yor/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:yor - **Package manager:** Homebrew - **Package manager page:** - **Version:** 0.1.200 - **Source summary:** Extensible auto-tagger for your IaC files - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - yor (cli) - yor (alias) ## Build dependencies - go ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 0.1.200 - Local data: ok - Upstream repository: https://github.com/bridgecrewio/yor - Upstream latest detected: 0.1.200 (current) - info: No package-manager update timestamp was available. ## Project history and usage Yor is Bridgecrew's open-source auto-tagger for infrastructure-as-code files. It adds consistent tags and trace identifiers to Terraform, CloudFormation, Serverless Framework, and related IaC so cloud resources can be traced back to code, owners, commits, and change history. ### Project history Yor was publicly launched on 2021-05-27, shortly after Palo Alto Networks acquired Bridgecrew. Palo Alto's announcement framed it as an open-source IaC tag-and-trace tool for developer workflows, with local CLI, pre-commit, GitHub Actions, and CI/CD usage. The README describes Yor as an open-source tool that adds informative and consistent tags across IaC frameworks, with built-in support for Terraform, CloudFormation, and Serverless Frameworks, plus custom taggers, skip annotations, dry runs, and Git-based tags. ### Adoption history Yor's adoption story is tied to cloud governance rather than app deployment. Help Net Security covered it as a tool for traceability and auditability, noting that organizations can run it retroactively across infrastructure resources or build it into CI/CD so ownership and other tags come from IaC and git history. Packaging followed developer workflow channels: Homebrew, Chocolatey, Docker, GitHub Actions, Azure DevOps snippets, and pre-commit hooks are all documented entry points. ### How it is used The common command is `yor tag --directory terraform/`, with options to recurse or not, include or skip tag groups, target specific frameworks, add simple custom tags, preview with dry-run, write JSON output, and skip directories or resource types. The most package-relevant mode is automated CI: Yor can run as a GitHub Action or pre-commit hook that modifies IaC files so trace and owner tags travel from source repositories into provisioned cloud resources. ### Why package nerds care Yor matters because it packages cloud tagging policy as a repeatable source-code transformation. It is a small CLI, but its runtime effect is on Terraform and other IaC files that later become cloud inventory, billing, security, and incident-response metadata. It is also an example of DevSecOps tooling where the package manager is part of governance distribution: install the CLI in CI, pin the hook/action version, and every repository can apply the same tagging logic. ### Timeline - 2021-05-27: Palo Alto Networks announces Yor as an open-source automated IaC tag-and-trace tool. - 2021-05-27: Security press covers Yor as an IaC traceability and auditability tool built by Bridgecrew. - 2020s: Yor documents usage as CLI, Docker image, GitHub Action, Azure DevOps step, and pre-commit hook. ### Related projects - Bridgecrew and Prisma Cloud/Cortex Cloud are the commercial ecosystem around the project. - bridgecrewio/yor-action is the GitHub Action integration. - Terraform, CloudFormation, Serverless Framework, Kubernetes, pre-commit, Docker, and GitHub Actions are major adjacent technologies in documented workflows. ### Sources - - - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** yor - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - yor: normalized package name match | nixpkgs package indexes: pkgs/by-name/yo/yor/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Related links - [Cloud CLI packages](https://www.automicvault.com/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider. - [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew. - [terracognita](https://www.automicvault.com/pkg/brew/terracognita/) - Shares av.db curated category or tags: cli, cloud, cloud-infrastructure, infrastructure-as-code, terraform. - [terraformer](https://www.automicvault.com/pkg/brew/terraformer/) - Shares av.db curated category or tags: cli, cloud, cloud-infrastructure, infrastructure-as-code, terraform. - [aiac](https://www.automicvault.com/pkg/brew/aiac/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code, terraform. - [cdktf](https://www.automicvault.com/pkg/brew/cdktf/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code, terraform. - [kuzco](https://www.automicvault.com/pkg/brew/kuzco/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code, terraform. - [pug](https://www.automicvault.com/pkg/brew/pug/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code, terraform. - [pulumi](https://www.automicvault.com/pkg/brew/pulumi/) - Shares av.db curated category or tags: cli, cloud, cloud-infrastructure, infrastructure-as-code. - [terraform-local](https://www.automicvault.com/pkg/brew/terraform-local/) - Shares av.db curated category or tags: cli, cloud-infrastructure, infrastructure-as-code, terraform. ## Combined YAML source View the package source record on GitHub. [combined/yor.yml](https://github.com/automic-vault/db/blob/main/combined/yor.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph