Credential access
Reads cloud credentials, Pulumi tokens, stack config, and secret providers.
brew / rank 783
Cloud native development platform. Version 3.273.0 via Homebrew; verified 2026-10-28. Also installable with nix: nix profile install nixpkgs#pulumi.
agent safety
pulumi is an infrastructure-as-code CLI that can mutate cloud resources from local state and credentials.
Reads cloud credentials, Pulumi tokens, stack config, and secret providers.
Can create, update, and destroy cloud infrastructure.
Can deploy application infrastructure and write stack outputs.
Gate pulumi up, destroy, refresh with writes, and config secret changes.
Allow preview only by default; require approval for any state-changing operation.
install
brew install pulumilocal Homebrew formula metadata
sudo port install pulumiMacPorts ports tree · sysutils/pulumi/Portfile · source: api.github.com
sudo apk add pulumiAlpine Linux edge package indexes · pulumi · source: dl-cdn.alpinelinux.org
nix profile install nixpkgs#puluminixpkgs package indexes · pkgs/by-name/pu/pulumi/package.nix · source: api.github.com
sudo pacman -S pulumiArch Linux sync databases · pulumi · source: geo.mirror.pkgbuild.com
choco install pulumiChocolatey community package catalog · pulumi · source: community.chocolatey.org
scoop install main/pulumiScoop official bucket manifest trees · bucket/pulumi.json · source: api.github.com
winget install --id Pulumi.Pulumi -eWindows Package Manager source index · Pulumi.Pulumi · source: cdn.winget.microsoft.com
overview
Cloud native development platform
history
Pulumi is an open-source infrastructure-as-code platform that provisions cloud, Kubernetes, and SaaS resources using general-purpose programming languages or YAML. Its CLI evaluates programs, previews changes, performs updates, and records deployment state in Pulumi Cloud or a self-managed backend.
Pulumi was founded in 2017 to simplify cloud engineering through general-purpose programming languages. The project launched publicly as open source in June 2018 with support for major clouds and Kubernetes.
Pulumi 1.0 reached general availability in September 2019. Subsequent development broadened language support, providers, component packages, policy, automation APIs, managed deployments, and environment and secrets management.
Pulumi attracted teams that wanted infrastructure as code without placing all resource definitions in a separate domain-specific language. Support for TypeScript, JavaScript, Python, Go, .NET, Java, and YAML made it accessible to application-development and platform-engineering teams.
The project combines an open-source CLI and SDKs with Pulumi Cloud for managed state and organizational workflows. It also supports self-managed state backends, allowing teams to adopt the programming model independently of the hosted service.
A typical workflow uses pulumi new to scaffold a project, pulumi stack to select an isolated deployment, pulumi config to manage stack values, pulumi preview to inspect proposed changes, and pulumi up to apply them. Pulumi.yaml identifies the project, while Pulumi.<stack-name>.yaml stores stack settings.
Teams use Pulumi for multi-cloud provisioning, Kubernetes resources, SaaS configuration, reusable platform components, CI/CD, policy as code, and embedded deployment automation. Backend and encryption-provider choices determine how state and secrets are stored.
Pulumi made ordinary language package ecosystems, IDEs, tests, functions, and abstractions first-class infrastructure-authoring tools. Reusable infrastructure components can therefore be distributed through familiar language registries as well as Pulumi's package ecosystem.
Its provider model also connects package cultures: Pulumi publishes native providers and can consume Terraform or OpenTofu providers, modules, and state, making interoperability a central part of its infrastructure package story.
security posture
infrastructure as code tool.
orange risk · high confidence · infrastructure
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
./Pulumi.yaml./Pulumi.yml./Pulumi.<stack>.yaml./Pulumi.<stack>.yml.\Pulumi.yaml.\Pulumi.yml.\Pulumi.<stack>.yaml.\Pulumi.<stack>.ymlCredential-bearing paths to review before unattended agent runs.
~/.pulumi/credentials.jsonexecutables
| Command | Kind | Exposure | Note |
|---|---|---|---|
pulumi | cli | global executable | |
pulumi-language-bun | cli | global executable | |
pulumi-language-dotnet | cli | global executable | |
pulumi-language-go | cli | global executable | |
pulumi-language-java | cli | global executable | |
pulumi-language-nodejs | cli | global executable | |
pulumi-language-pcl | cli | global executable | |
pulumi-language-python | cli | global executable | |
pulumi-language-python-exec | cli | global executable | |
pulumi-language-yaml | cli | global executable | |
pulumi-resource-pulumi-nodejs | cli | global executable | |
pulumi-resource-pulumi-python | cli | global executable | |
pulumi-watch | cli | global executable |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
https://github.com/pulumi/pulumi
install metadata
| Package key | brew:pulumi |
|---|---|
| Version | 3.273.0 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/pulumi |
| Homepage | https://www.pulumi.com/ |
| Repository | https://github.com/pulumi/pulumi |
| Upstream docs | https://www.pulumi.com/ |
| License | Apache-2.0 |
| Source archive | https://github.com/pulumi/pulumi.git |
| Last updated | 2026-10-28T21:45:32Z |
| Pulse | updated |
| Build dependencies | go |
| Bottle | available (on arm64_golden_gate, arm64_linux, arm64_sequoia, arm64_tahoe, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | pulumi |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
pulumi
nix profile install nixpkgs#pulumipulumi 3.255.0-r0
Infrastructure as Code SDK
sudo apk add pulumipulumi-bash-completion 3.255.0-r0
Bash completions for pulumi
sudo apk add pulumi-bash-completionpulumi-fish-completion 3.255.0-r0
Fish completions for pulumi
sudo apk add pulumi-fish-completionpulumi-language-go 3.255.0-r0
Infrastructure as Code SDK (Go language provider)
sudo apk add pulumi-language-gopulumi-language-nodejs 3.255.0-r0
Infrastructure as Code SDK (NodeJS language provider)
sudo apk add pulumi-language-nodejspulumi-language-pcl 3.255.0-r0
Infrastructure as Code SDK (PCL language provider)
sudo apk add pulumi-language-pclpulumi-language-python 3.255.0-r0
Infrastructure as Code SDK (Python language provider)
sudo apk add pulumi-language-pythonpulumi-zsh-completion 3.255.0-r0
Zsh completions for pulumi
sudo apk add pulumi-zsh-completionpulumi 3.256.0-1
Modern Infrastructure as Code
https://github.com/pulumi/pulumi
sudo pacman -S pulumipulumi
sudo port install pulumipulumi
choco install pulumimain/pulumi
scoop install main/pulumiPulumi.Pulumi
winget install --id Pulumi.Pulumi -epulumi-language-dotnet 3.109.0-r0
Infrastructure as Code SDK (.NET language provider)
sudo apk add pulumi-language-dotnetpulumi-language-java 1.34.0-r0
Infrastructure as Code SDK (Java language provider)
sudo apk add pulumi-language-javasource trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.