Automic Vault
安装
sudo av install brew:ghbrew install gh
local Homebrew formula metadata
sudo port install gh
MacPorts ports tree · devel/gh/Portfile · 来源: api.github.com
sudo dnf install gh
Fedora Rawhide package metadata · gh · 来源: dl.fedoraproject.org
nix profile install nixpkgs#gh
nixpkgs package indexes · pkgs/by-name/gh/gh/package.nix · 来源: api.github.com
sudo zypper install gh
openSUSE Tumbleweed package metadata · gh · 来源: download.opensuse.org
choco install gh
Chocolatey community package catalog · gh · 来源: community.chocolatey.org
scoop install main/gh
Scoop official bucket manifest trees · bucket/gh.json · 来源: api.github.com
winget install --id GitHub.cli -e
Windows Package Manager source index · GitHub.cli · 来源: cdn.winget.microsoft.com
概览
Automic Vault 根据本地软件包数据发布 gh 的安装路径、可执行文件事实和安全元数据。
radioisotope
`gh` stores its secrets in the Keychain but they can be trivially obtained: 1. `gh auth token` 2. `security find-generic-password -s 'gh:github.com' -w` Our isotope prevents anything but `gh` itself from accessing its secrets by gating `gh auth token` behind a Automic Vault human-approval prompt and gating attempts to use the macOS `security` tool behind a keychain approval prompt.
blue 风险 · high 置信度 · tool
本地 README 摘录
This repository is the Automic Vault fork of GitHub CLI.
Automic Vault is a macOS-first secret and execution control system that keeps sensitive credentials behind explicit human approval in the Automic Vault GUI app instead of exposing them directly to terminal tools.
This fork currently adds the following behavior on top of upstream cli/cli:
gh binary instead of/usr/bin/security, so Keychain trust is attached to this app binary.
print stored tokens in plain text. This covers gh auth token, gh auth status --show-token, gh config get -h HOST oauth_token, and the hidden gh auth git-credential get helper.
secrets from the factory-release to our isotope.
gh installs, including plaintexthosts.yml tokens and Keychain ACLs that allow /usr/bin/security to read gh secrets.
来源: data/isotopes/gh-cli/README.md
https://github.com/automic-vault/gh-cli/releases/tag/v2.92.0
审批门
The local approval-gate seed includes 7 rules for gh. Covered entrypoints: gh. Severity labels: critical, high. Coverage: partial, 已审查 2026-05-21.
可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
gh | cli | global executable |
新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
安装元数据
| 软件包键 | brew:gh |
|---|---|
| 版本 | 2.92.0 |
| 软件包管理器 | Homebrew |
| 软件包管理器页面 | https://formulae.brew.sh/formula/gh |
| 主页 | https://cli.github.com/ |
| 仓库 | https://github.com/cli/cli |
| 上游文档 | https://cli.github.com/ |
| 许可证 | MIT |
| 源码归档 | https://github.com/cli/cli/archive/refs/tags/v2.92.0.tar.gz |
| 更新 | 2026-05-21T14:58:05+02:00 |
| Pulse | updated |
| 构建依赖 | go |
| Bottle | 可用 (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | 未定义 |
| 服务 | 未声明 |
来源线索
此页面由 scripts/generate-pkg-pages.py 写入。如果 www/pkg/ 相对于本地软件包数据已过期，部署会拒绝发布。