# threatcl mit Homebrew installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für threatcl in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:threatcl ``` Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install threatcl ``` Evidenz: local Homebrew formula metadata ## Paketfakten - **Paketschlüssel:** brew:threatcl - **Paketmanager:** Homebrew - **Paketmanager-Seite:** - **Version:** 0.6.5 - **Quellzusammenfassung:** Documenting your Threat Models with HCL - **Homepage:** - **Repository:** - **Lizenz:** MIT - **Quellarchiv:** - **Zuletzt aktualisiert:** 2026-08-01T13:15:26Z - **Generiert:** 2026-08-04T22:13:35+00:00 ## Executables - threatcl (cli) - threatcl (Alias) ## Build-Abhängigkeiten - go ## Installationsverhalten - Post-install-Hook: nicht definiert - Bottle: verfügbar auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Version und Aktualität - Seite generiert: 2026-08-04 - Manager-Version: 0.6.5 - Manager aktualisiert: 2026-08-01 - lokale Daten: OK - Upstream-Repository: https://github.com/threatcl/threatcl - neueste erkannte Version: v0.6.5 (aktuell) ## Projektgeschichte und Nutzung threatcl is a command-line tool and HCL-based specification for documenting threat models in text files. The official README says the project was formerly named hcltm and was renamed to threatcl. ### Projektgeschichte The project frames threat modeling as a DevOps and version-control workflow: its README argues for a simple text-file format, a CLI-driven user experience, and integration with VCS. It builds on HashiCorp Configuration Language and the README explicitly connects that choice to Terraform familiarity and machine-readable structure. ### Adoptionsgeschichte The official documentation positions threatcl for several installation and automation paths: Homebrew, Go install, Docker, and GitHub Actions. The README also documents release provenance through SLSA and GitHub attestations, which fits the security-tooling audience that may want to verify downloaded binaries and container images. ### Wie es verwendet wird Users write threat models in HCL, then use the CLI to validate, list, view, export, query, generate dashboards, render data-flow diagrams, parse Terraform output, or run a server. The optional `config.hcl` file can override default classifications, impact types, STRIDE elements, and dependency classifications. ### Warum Paket-Nerds sich dafür interessieren For package nerds, threatcl is notable because it turns a security documentation practice into a normal source-controlled artifact with a CLI, Homebrew install, container image, GitHub Action, release attestations, and HCL syntax familiar to infrastructure engineers. ### Zeitleiste - Project README: hcltm is renamed to threatcl. - Current README: documents Homebrew, Docker, GitHub Actions, SLSA attestations, HCL threat models, GraphQL queries, Terraform parsing, and optional config.hcl. - Current docs site: documents Homebrew, Go, Docker, and GitHub Actions getting-started flows. ### Related projects - Related projects and specifications include Terraform and HCL2, OWASP threat-modeling material, OpenThreatModel, go-dfd, GitHub Actions automation, and security-as-code workflows. ### Quellen - - ## Sicherheitshinweise Für threatcl wurde kein passendes lokales Secret-Handling-Manifest gefunden. Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: config.hcl ## Details aus der Quelldatenbank - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** threatcl - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Verwandte Links - [Source-control packages](https://pkg.so/de/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://pkg.so/de/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/de/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://pkg.so/de/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [go](https://pkg.so/de/brew/go/) - Build dependency declared by Homebrew. - [gnutls](https://pkg.so/de/brew/gnutls/) - Shares pkgdb curated category or tags: cli, security. - [krb5](https://pkg.so/de/brew/krb5/) - Shares pkgdb curated category or tags: cli, security. - [nettle](https://pkg.so/de/brew/nettle/) - Shares pkgdb curated category or tags: cli, security. - [libcap](https://pkg.so/de/brew/libcap/) - Shares pkgdb curated category or tags: cli, security. - [nss](https://pkg.so/de/brew/nss/) - Shares pkgdb curated category or tags: cli, security. - [pinentry](https://pkg.so/de/brew/pinentry/) - Shares pkgdb curated category or tags: cli, security. - [libassuan](https://pkg.so/de/brew/libassuan/) - Shares pkgdb curated category or tags: cli, security. - [cyrus-sasl](https://pkg.so/de/brew/cyrus-sasl/) - Shares pkgdb curated category or tags: cli, security. - [cargo-deny](https://pkg.so/de/brew/cargo-deny/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, security, your. - [feluda](https://pkg.so/de/brew/feluda/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, security, your. - [gau](https://pkg.so/de/brew/gau/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, security, threat. ## Combined YAML source View the package source record on GitHub. [combined/threatcl.yml](https://github.com/mxcl/pkgdb/blob/main/combined/threatcl.yml) ## Quellen - pkg.so package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - cross-ecosystem install command graph