Credential access
Handles secret manifests and cluster public keys; input files may contain sensitive values.
agent safety
Agent safety answer
kubeseal transforms Kubernetes secrets and is tied to cluster secret-management workflows.
Remote mutation
Does not usually mutate clusters directly, but output is intended for cluster application.
Publish/artifact risk
Can produce sealed secret artifacts committed or deployed to clusters.
Recommended control
Gate commands that read plaintext secret files or write deployable sealed secrets.
Agent-use guidance
Allow public-key fetches; require approval before processing plaintext secrets or writing manifests.
安装
使用 Automic Vault 安装
Automic Vault
sudo av install brew:kubesealmacOS
Homebrewverified · 100%
brew install kubeseallocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install kubesealMacPorts ports tree · sysutils/kubeseal/Portfile · source: api.github.com
Linux
Alpine Linux apkverified · 92%
sudo apk add kubesealAlpine Linux edge package indexes · kubeseal · source: dl-cdn.alpinelinux.org
Nixverified · 92%
nix profile install nixpkgs#kubesealnixpkgs package indexes · pkgs/by-name/ku/kubeseal/package.nix · source: api.github.com
Arch Linux pacmanverified · 92%
sudo pacman -S kubesealArch Linux sync databases · kubeseal · source: geo.mirror.pkgbuild.com
openSUSE zypperverified · 92%
sudo zypper install kubesealopenSUSE Tumbleweed package metadata · kubeseal · source: download.opensuse.org
Windows
Scoopverified · 92%
scoop install main/kubesealScoop official bucket manifest trees · bucket/kubeseal.json · source: api.github.com
软件包管理器来源
平台说明
- 没有特定于此软件包的平台说明。
概览
软件包摘要
Kubernetes controller and tool for one-way encrypted Secrets
主页
命令和别名
- kubeseal
安全态势
风险级别：orange
broad file, network, media, or database tool signal. infrastructure mutation or orchestration signal.
Risk classifier
orange risk · medium confidence · infrastructure
Why
- broad file, network, media, or database tool signal
- infrastructure mutation or orchestration signal
Signals
- text:encrypt
- text:kubernetes
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 6 platform targets.
- Build metadata lists 1 build dependencies.
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
kubeseal | cli | global executable |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-06-10
管理器版本0.37.0
管理器更新时间2026-05-21
本地数据ok
上游not checked
检测到的最新版本not detected
https://github.com/bitnami-labs/sealed-secrets
- infoNo cached GitHub release or tag data was available.https://github.com/bitnami-labs/sealed-secretsnone confidence
安装元数据
软件包元数据
| Package key | brew:kubeseal |
|---|---|
| Version | 0.37.0 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/kubeseal |
| Homepage | https://github.com/bitnami-labs/sealed-secrets |
| Repository | https://github.com/bitnami-labs/sealed-secrets |
| Upstream docs | https://github.com/bitnami-labs/sealed-secrets/blob/main/README.md |
| License | Apache-2.0 |
| Source archive | https://github.com/bitnami-labs/sealed-secrets.git |
| Last updated | 2026-05-21T19:18:50Z |
| Pulse | updated |
| Build dependencies | go |
| Bottle | available (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | kubeseal |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Nix95%
kubeseal
nix profile install nixpkgs#kubeseal- normalized package name match
- Matched by: Kubeseal
apk95%
kubeseal 0.37.0-r0
A Kubernetes controller and tool for one-way encrypted Secrets
https://github.com/bitnami-labs/sealed-secrets
sudo apk add kubeseal- License: Apache-2.0
- Architecture: x86_64
- Source Package: kubeseal
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Kubeseal
apk95%
kubeseal-doc 0.37.0-r0
A Kubernetes controller and tool for one-way encrypted Secrets (documentation)
https://github.com/bitnami-labs/sealed-secrets
sudo apk add kubeseal-doc- License: Apache-2.0
- Architecture: x86_64
- Source Package: kubeseal
- normalized package name match
- Matched by: Kubeseal
pacman95%
kubeseal 0.35.0-2
A Kubernetes controller and tool for one-way encrypted Secrets
https://github.com/bitnami-labs/sealed-secrets
sudo pacman -S kubeseal- License: Apache
- Architecture: x86_64
- 1 dependencies
- normalized package name match
- Matched by: Kubeseal
zypper95%
kubeseal 0.37.0-1.1
CLI for encrypting secrets to SealedSecrets
https://github.com/bitnami-labs/sealed-secrets
sudo zypper install kubeseal- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: kubeseal
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Kubeseal
MacPorts95%
kubeseal
sudo port install kubeseal- normalized package name match
- Matched by: Kubeseal
Scoop95%
main/kubeseal
scoop install main/kubeseal- normalized package name match
- Matched by: Kubeseal
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
使用的来源
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated agent safety answer
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment