代理安全

代理安全回答

sqlcmd sends SQL to Microsoft SQL Server and Azure SQL targets.

凭据访问

Reads database passwords, connection strings, tokens, and environment credentials.

远程变更

Can create, alter, drop, import, and export database state.

发布/制品风险

Can dump or load data artifacts containing sensitive records.

代理使用指南

Allow safe metadata queries; require approval for writes, exports, and secret use.

安装

其他安装命令

macOS

Homebrew已验证 · 100%

brew install sqlcmd

local Homebrew formula metadata

Linux

Nix已验证 · 92%

nix profile install nixpkgs#sqlcmd

nixpkgs package indexes · pkgs/by-name/sq/sqlcmd/package.nix · 来源: api.github.com

Windows

Chocolatey已验证 · 92%

choco install sqlcmd

Chocolatey community package catalog · sqlcmd · 来源: community.chocolatey.org

Windows Package Manager已验证 · 92%

winget install --id Microsoft.Sqlcmd -e

Windows Package Manager source index · Microsoft.Sqlcmd · 来源: cdn.winget.microsoft.com

概览

软件包摘要

Microsoft SQL Server command-line interface

项目链接

命令和别名

sqlcmd

历史

项目历史与用法

sqlcmd is Microsoft's command-line interface for SQL Server and Azure SQL. The Homebrew formula tracks the newer Go implementation, go-sqlcmd, which preserves much of the long-running ODBC sqlcmd workflow while adding modern package-manager distribution and container-oriented commands.

项目历史

Microsoft's go-sqlcmd repository was created in 2021, and its README says the project aims to be a complete Go port of the original ODBC sqlcmd using the go-mssqldb driver.

The first preview releases appeared in 2021. The README documents both backward-compatible ODBC-style flags and newer POSIX-style flags, plus additions such as local SQL Server container creation and context management.

采用历史

The Go version is explicitly packaged for major platforms: the README lists Winget, Chocolatey, Homebrew, Linuxbrew, apt, yum, zypper, and release artifacts. The input package metadata lists Homebrew, Chocolatey, Nix, and Winget identifiers.

使用方式

Common usage includes running queries against SQL Server or Azure SQL, piping SQL into the CLI for scripts, creating local SQL Server containers with sqlcmd create mssql, and switching saved connection contexts stored under ~/.sqlcmd/sqlconfig.

为什么软件包爱好者会关心

Package nerds care about go-sqlcmd because it turns a historically vendor-installed database utility into a cross-platform package-manager CLI, bridging Windows SQL Server habits with Homebrew, Winget, Chocolatey, Linux packaging, and container-first local development.

时间线

2021: go-sqlcmd repository created.
2021: v0.0.5 and v0.1.0 preview releases published.
2022: early releases add more compatibility switches.
Current README: documents package-manager installs and backward compatibility differences from ODBC sqlcmd.

Related projects

go-sqlcmd is related to the original ODBC sqlcmd, Microsoft's go-mssqldb driver, SQL Server, Azure SQL Database, Azure Synapse, Docker or Podman local SQL Server workflows, and Azure Data Studio integration.

来源

https://api.github.com/repos/microsoft/go-sqlcmd
https://api.github.com/repos/microsoft/go-sqlcmd/releases
https://github.com/microsoft/go-sqlcmd#readme
https://learn.microsoft.com/en-us/sql/tools/sqlcmd/sqlcmd-utility
input.source_facts.package-manager

安全态势

风险级别：blue

broad file, network, media, or database tool signal.

风险分类器

blue 风险 · 中置信度 · tool

原因

broad file, network, media, or database tool signal

信号

text:sql,server

安装行为

formula 元数据中未记录 Homebrew post-install 钩子。
Homebrew bottle 元数据适用于 6 个平台目标。
构建元数据列出 1 个构建依赖。

建议审查

在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: ~/.sqlcmd/sqlconfig

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix: ~/.sqlcmd/sqlconfig

可执行文件

已安装的可执行文件

命令	类型	暴露范围	备注
`sqlcmd`	cli	全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。

页面生成时间2026-07-25

管理器版本1.10.0

管理器更新时间

本地数据OK

上游当前

检测到的最新版本v1.10.0

https://github.com/microsoft/go-sqlcmd

信息No package-manager update timestamp was available.低置信度

安装元数据

软件包元数据

软件包键	brew:sqlcmd
版本	1.10.0
软件包管理器	Homebrew
软件包管理器页面	https://formulae.brew.sh/formula/sqlcmd
主页	https://github.com/microsoft/go-sqlcmd
仓库	https://github.com/microsoft/go-sqlcmd
上游文档	https://github.com/microsoft/go-sqlcmd#readme
许可证	MIT
源码归档	https://github.com/microsoft/go-sqlcmd/archive/refs/tags/v1.10.0.tar.gz
构建依赖	go
Bottle	可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	未定义
服务	未声明

注册表事实

源数据库详情

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	sqlcmd
Version Scheme	0
Revision	0
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。

Nix95%

sqlcmd

nix profile install nixpkgs#sqlcmd

normalized package name match
匹配方式：Sqlcmd

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/sq/sqlcmd/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

Chocolatey95%

sqlcmd

choco install sqlcmd

normalized package name match
匹配方式：Sqlcmd

Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: sqlcmd from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','sql2008r2.cmdline'

winget95%

Microsoft.Sqlcmd

winget install --id Microsoft.Sqlcmd -e

normalized package name match
匹配方式：Sqlcmd

Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Microsoft.Sqlcmd from https://cdn.winget.microsoft.com/cache/source.msix

软件包图谱

链接来自本地软件包关系图、补充数据、依赖边、生态匹配和软件包 hub 归属。

来源线索

由仓库数据生成

此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

Combined YAML source

View the package source record on GitHub.

combined/sqlcmd.yml

使用的来源

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated agent safety answer
curated configuration and credential file locations
curated package history
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

使用 Homebrew, chocolatey, Nix, winget 安装 sqlcmd

代理安全回答

凭据访问

远程变更

发布/制品风险

推荐控制

代理使用指南

其他安装命令

macOS

Linux

Windows

软件包摘要

项目链接

命令和别名

项目历史与用法

项目历史

采用历史

使用方式

为什么软件包爱好者会关心

时间线

Related projects

来源

风险级别：blue

风险分类器

原因

信号

安装行为

建议审查

Configuration and credential file locations

Configuration files

Credential files

已安装的可执行文件

版本和新鲜度

软件包元数据

源数据库详情

其他软件包管理器记录

由仓库数据生成

Combined YAML source

使用的来源

使用 Homebrew, chocolatey, Nix, winget 安装 sqlcmd

代理安全回答

凭据访问

远程变更

发布/制品风险

推荐控制

代理使用指南

其他安装命令

macOS

Linux

Windows

软件包摘要

项目链接

命令和别名

项目历史与用法

项目历史

采用历史

使用方式

为什么软件包爱好者会关心

时间线

Related projects

来源

风险级别：blue

风险分类器

原因

信号

安装行为

建议审查

Configuration and credential file locations

Configuration files

Credential files

已安装的可执行文件

版本和新鲜度

软件包元数据

源数据库详情

其他软件包管理器记录

内部软件包链接

主题 hub

相关工具

相同工作流

代理安全指南

由仓库数据生成

Combined YAML source

使用的来源