Automic Vault

brew 软件包情报

安装 aliyun-cli

查看 aliyun-cli 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装

使用 Automic Vault 安装

Automic Vault
下载 AV
sudo av install brew:aliyun-cli

macOS

Homebrew 已验证 · 100%
brew install aliyun-cli

local Homebrew formula metadata

Linux

Nix 已验证 · 92%
nix profile install nixpkgs#aliyun-cli

nixpkgs package indexes · pkgs/by-name/al/aliyun-cli/package.nix · 来源: api.github.com

Arch Linux pacman 已验证 · 92%
sudo pacman -S aliyun-cli

Arch Linux sync databases · aliyun-cli · 来源: geo.mirror.pkgbuild.com

openSUSE zypper 已验证 · 92%
sudo zypper install aliyun-cli

openSUSE Tumbleweed package metadata · aliyun-cli · 来源: download.opensuse.org

Windows

Windows Package Manager 已验证 · 92%
winget install --id Alibaba.AlibabaCloudCLI -e

Windows Package Manager source index · Alibaba.AlibabaCloudCLI · 来源: cdn.winget.microsoft.com

Scoop 已验证 · 92%
scoop install main/aliyun

Scoop official bucket manifest trees · bucket/aliyun.json · 来源: api.github.com

平台说明

  • 没有特定于此软件包的平台说明。

概览

软件包摘要

Automic Vault 根据本地软件包数据发布 aliyun-cli 的安装路径、可执行文件事实和安全元数据。

命令和别名

  • aliyun

来源摘要

Universal Command-Line Interface for Alibaba Cloud

radioisotope

Plain Text Alibaba Cloud CLI Credentials

Alibaba Cloud CLI stores configured profile secrets in plaintext JSON under ~/.aliyun/config.json, including access_key_secret, sts_token, private_key, access_token, and OAuth refresh tokens. Our isotope stores that config in the macOS keychain and restores it into a temporary HOME only while `aliyun` runs.

风险分类器

orange 风险 · medium 置信度 · infrastructure

原因

  • infrastructure mutation or orchestration signal

信号

  • text:cloud

安装行为

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • 构建元数据列出 1 个构建依赖。

本地 README 摘录

Alibaba Cloud CLI radioisotope

This radioisotope protects Alibaba Cloud CLI credentials that are normally stored in plaintext JSON at ~/.aliyun/config.json.

What it migrates

It stores the full config JSON in the macOS keychain when any configured profile contains inline credential material such as:

  • access_key_secret
  • sts_token
  • private_key
  • access_token
  • oauth_access_token
  • oauth_refresh_token

The migration rewrites the local config to a valid JSON document with those secret fields blanked. At runtime the wrapper restores the original config under a temporary HOME.

Caveats

  • Only the default ~/.aliyun/config.json location is migrated.
  • Explicit --config-path arguments are not intercepted.
  • Runtime config changes are not persisted back to keychain.
  • Direct execution of the original binary will not receive credentials.

来源: data/radioisotopes/aliyun-cli/README.md

Caveats

  • Only the default ~/.aliyun/config.json location is migrated.
  • Explicit --config-path arguments can override the temporary config.
  • Runtime config changes are not persisted back to keychain.
  • Direct execution of the original binary will not receive credentials.

可执行文件

已安装的可执行文件

命令类型暴露范围备注
aliyuncliglobal executable

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-05-26
管理器版本3.3.16
管理器更新时间2026-05-23
本地数据ok
上游not checked
检测到的最新版本未检测到

https://github.com/aliyun/aliyun-cli

安装元数据

软件包元数据

软件包键brew:aliyun-cli
版本3.3.16
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/aliyun-cli
主页https://github.com/aliyun/aliyun-cli
仓库https://github.com/aliyun/aliyun-cli
许可证Apache-2.0
源码归档https://github.com/aliyun/aliyun-cli.git
更新2026-05-23T04:24:08Z
Pulseupdated
构建依赖go
Bottle可用 (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定义
服务未声明

来源线索

由仓库数据生成

此页面由 scripts/generate-pkg-pages.py 写入。如果 www/pkg/ 相对于本地软件包数据已过期,部署会拒绝发布。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • cross-ecosystem install command graph
  • local isotope README
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • radioisotope security manifest