Automic VaultAutomic Vault

brew

使用 Homebrew, chocolatey, scoop, winget 安装 aqua

查看 aqua 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install aqua

local Homebrew formula metadata

Windows

Chocolatey已验证 · 92%
choco install aqua

Chocolatey community package catalog · aqua · 来源: community.chocolatey.org

Scoop已验证 · 92%
scoop install main/aqua

Scoop official bucket manifest trees · bucket/aqua.json · 来源: api.github.com

Windows Package Manager已验证 · 92%
winget install --id aquaproj.aqua -e

Windows Package Manager source index · aquaproj.aqua · 来源: cdn.winget.microsoft.com

概览

软件包摘要

Declarative CLI Version manager

历史

项目历史与用法

aqua is a declarative CLI version manager written in Go. It installs and switches command-line tools from YAML configuration, aiming at the same daily workflow space as asdf-style tool managers but with a registry, lazy install behavior, and Renovate-friendly version declarations.

项目历史

The official aqua repository was created in August 2021. The repository description calls it a declarative CLI version manager with lazy install, a registry, Renovate support, and seamless command version switching.

The documentation centers on `aqua.yaml` and registry-backed package definitions. The config reference documents local and global config discovery, standard and local registries, JSON Schema support, checksum settings, and security toggles for provenance verification.

采用历史

aqua is distributed through Homebrew, Chocolatey, Scoop, and winget in the input metadata. The official repository metadata shows active development, a four-digit star count, and topics around CLI tooling and version management.

The project explicitly documents Renovate integration, YAML language-server schemas, a standard registry, and using aqua together with other version managers such as asdf. That makes its adoption story especially package-manager-native: it is designed for repositories to declare the tools they need and let bots update those declarations.

使用方式

Users add packages such as `helm/helm@v3.7.0` or `golangci/golangci-lint@v1.42.1` to aqua configuration, pin a standard registry ref, and let aqua install or lazily install the requested executables.

Configuration discovery is intentionally repository-friendly: aqua checks `$AQUA_CONFIG`, then `.aqua.yaml`, `aqua.yaml`, `aqua/aqua.yaml`, and `.aqua/aqua.yaml` while walking up from the current directory, with `$AQUA_GLOBAL_CONFIG` for global tools.

为什么软件包爱好者会关心

aqua is interesting because it treats command-line tools themselves as lockable, reviewable project dependencies. The registry and Renovate conventions put CLI installation into the same maintenance loop as library dependencies, which is exactly the sort of thing package nerds care about.

时间线

  • 2021: The official aqua repository was created.
  • 2021: The documentation copyright begins and the project published docs under aquaproj.github.io.
  • 2023: The config reference notes aqua v1.33.0 support for keeping configuration files in `.aqua` directories.
  • 2024: The config reference documents v2-era provenance and policy controls such as Cosign, SLSA, and GitHub Artifact Attestation toggles.
  • 2026: The repository remains actively maintained in the 2.x release line.

Related projects

  • Related projects and systems include aqua-registry, Renovate, GitHub Actions, YAML Language Server, Cosign, SLSA Provenance, GitHub Artifact Attestations, ghtkn, Keyring, and asdf.

安全态势

风险级别:orange

infrastructure mutation or orchestration signal.

风险分类器

orange 风险 · 中 置信度 · infrastructure

原因

  • infrastructure mutation or orchestration signal

信号

  • text:version manager

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 6 个平台目标。
  • 构建元数据列出 1 个构建依赖。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
$AQUA_CONFIGaqua.yaml.aqua.yamlaqua/aqua.yaml.aqua/aqua.yaml$AQUA_GLOBAL_CONFIG

可执行文件

已安装的可执行文件

命令类型暴露范围备注
aquacli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-07-08
管理器版本2.60.1
管理器更新时间2026-06-16
本地数据OK
上游当前
检测到的最新版本v2.60.1

https://github.com/aquaproj/aqua

  • OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键brew:aqua
版本2.60.1
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/aqua
主页https://aquaproj.github.io/
仓库https://github.com/aquaproj/aqua
上游文档https://aquaproj.github.io/docs
许可证MIT
源码归档https://github.com/aquaproj/aqua/archive/refs/tags/v2.60.1.tar.gz
最后更新2026-06-16T04:27:07Z
Pulseupdated
构建依赖go
Bottle可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameaqua
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。

Chocolatey95%

aqua

choco install aqua
  • normalized package name match
  • 匹配方式:Aqua
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: aqua from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='7.158','newfiletime'
Scoop95%

main/aqua

scoop install main/aqua
  • normalized package name match
  • 匹配方式:Aqua
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/aqua.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

aquaproj.aqua

winget install --id aquaproj.aqua -e
  • normalized package name match
  • 匹配方式:Aqua
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: aquaproj.aqua from https://cdn.winget.microsoft.com/cache/source.msix

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment