Automic VaultAutomic Vault

brew

使用 Homebrew, apt 安装 mender-artifact

查看 mender-artifact 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install mender-artifact

local Homebrew formula metadata

Linux

Debian apt已验证 · 92%
sudo apt install mender-artifact

Debian stable package indexes · mender-artifact · 来源: deb.debian.org

概览

软件包摘要

CLI tool for managing Mender artifact files

命令和别名

  • mender-artifact

历史

项目历史与用法

mender-artifact is the library and CLI for working with Mender Artifact files, the .mender archives used by Mender's over-the-air update system. Mender documentation defines an Artifact as a tar-based archive containing versioning data, extensions, metadata, and one or more payload files. The GitHub project describes artifacts as wrappers that can carry binaries, metadata, checksums, signatures, and scripts used during deployments.

项目历史

The tool grew around the practical lifecycle of embedded-Linux updates: create an Artifact, validate it, inspect or dump it, sign it, and preserve metadata while modifying update payloads. Release notes show the format and tooling maturing through signing support in 2017, artifact format v3 documentation and image/artifact modification work in 2018, update-module read/write support in 2019, safer handling of signed and compressed artifacts in 2021, and cloud/HSM-oriented signing additions such as GCP KMS support in 2022.

使用方式

In package-manager terms, mender-artifact is a workstation tool rather than a device daemon. Developers and CI pipelines use it to package operating-system and application updates before upload to a Mender server; Mender's GitHub Actions documentation builds on that flow by uploading artifacts and triggering deployments from CI.

安全态势

风险级别:绿色

narrow executable package without higher-risk signals.

风险分类器

绿色 风险 · 低 置信度 · appliance

原因

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 6 个平台目标。
  • 安装时包含 4 个运行时依赖。
  • 构建元数据列出 2 个构建依赖。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

可执行文件

已安装的可执行文件

命令类型暴露范围备注
mender-artifactcli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-07-10
管理器版本4.4.1
管理器更新时间2026-07-09
本地数据OK
上游当前
检测到的最新版本4.4.1

https://github.com/mendersoftware/mender-artifact

  • OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键brew:mender-artifact
版本4.4.1
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/mender-artifact
主页https://mender.io
仓库https://github.com/mendersoftware/mender-artifact
上游文档https://docs.mender.io/artifact-creation/create-an-artifact
许可证Apache-2.0
源码归档https://github.com/mendersoftware/mender-artifact/archive/refs/tags/4.4.1.tar.gz
最后更新2026-07-09T14:23:41Z
Pulseupdated
依赖dosfstools, e2fsprogs, mtools, openssl@3
构建依赖go, pkgconf
Bottle可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namemender-artifact
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。

Debian apt95%

mender-artifact 3.9.0+ds1-2+b5

utility to generate .mender artifacts

https://github.com/mendersoftware/mender-artifact

sudo apt install mender-artifact
  • Section: devel
  • Architecture: amd64
  • Source Package: golang-github-mendersoftware-mender-artifact
  • 7 依赖
  • normalized package name match
  • 匹配方式:Mender Artifact
Debian stable package indexes · deb.debian.org · Debian stable package indexes: mender-artifact from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Ubuntu apt95%

mender-artifact 3.9.0+ds1-1build3

utility to generate .mender artifacts

https://github.com/mendersoftware/mender-artifact

sudo apt install mender-artifact
  • Section: universe/devel
  • Architecture: amd64
  • Source Package: golang-github-mendersoftware-mender-artifact
  • 7 依赖
  • normalized package name match
  • 匹配方式:Mender Artifact
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: mender-artifact from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment