# two-ms mit Homebrew installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für two-ms in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:two-ms ``` Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install two-ms ``` Evidenz: local Homebrew formula metadata ## Paketfakten - **Paketschlüssel:** brew:two-ms - **Paketmanager:** Homebrew - **Paketmanager-Seite:** - **Version:** 5.2.4 - **Quellzusammenfassung:** Detect secrets in files and communication platforms - **Homepage:** - **Repository:** - **Lizenz:** Apache-2.0 - **Quellarchiv:** - **Zuletzt aktualisiert:** 2026-07-26T03:12:24+02:00 - **Generiert:** 2026-08-04T22:13:35+00:00 ## Executables - 2ms (cli) - 2ms (Alias) ## Build-Abhängigkeiten - go ## Installationsverhalten - Post-install-Hook: nicht definiert - Bottle: verfügbar auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Version und Aktualität - Seite generiert: 2026-08-04 - Manager-Version: 5.2.4 - Manager aktualisiert: 2026-07-26 - lokale Daten: OK - Upstream-Repository: https://github.com/Checkmarx/2ms - neueste erkannte Version: v5.2.4 (aktuell) ## Projektgeschichte und Nutzung 2ms, short for Too Many Secrets, is a Checkmarx open-source CLI for finding exposed credentials in code, files, Git history, and collaboration platforms. ### Projektgeschichte The README describes 2ms as a modern secrets-discovery CLI from Checkmarx that builds on the gitleaks detection engine with Checkmarx rules, CVSS-based scoring, reporting, and optional live validation. Its public release history visible through GitHub starts in the 2023 series and continues through frequent 2026 releases. ### Adoptionsgeschichte The tool is packaged for Homebrew and also distributed through GitHub releases, source builds, and Docker. Its adoption story is therefore CI and AppSec oriented: developers install it locally with Homebrew, run it in containers, or wire SARIF/JSON output into pipelines. ### Wie es verwendet wird 2ms is used to scan local filesystems, Git repositories, Confluence Cloud, Slack, Discord, and Paligo. The README examples emphasize `2ms filesystem --path .` for workspace scans and `2ms git . --depth 50` for recent Git history. ### Warum Paket-Nerds sich dafür interessieren For package-manager users, 2ms is interesting because it compresses several security-scanning surfaces into one small Go CLI. It is the sort of tool installed ad hoc before publishing code, added to CI as a gate, or used during incident response to search histories and chat exports for credentials. ### Zeitleiste - 2023: GitHub release metadata shows early public 2.x releases. - 2026: GitHub release metadata shows active 5.x releases and prereleases. ### Related projects - gitleaks: the detection engine named by the 2ms README. - Checkmarx: maintainer and vendor of the 2ms project. ### Quellen - - - - source_facts.package-manager ## Sicherheitshinweise narrow executable package without higher-risk signals. - **Geiger-Risiko:** grün / niedrig - narrow executable package without higher-risk signals ## Details aus der Quelldatenbank - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** two-ms - **Aliases:** 2ms - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Verwandte Links - [Source-control packages](https://pkg.so/de/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://pkg.so/de/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/de/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://pkg.so/de/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [go](https://pkg.so/de/brew/go/) - Build dependency declared by Homebrew. - [trufflehog](https://pkg.so/de/brew/trufflehog/) - Shares pkgdb curated category or tags: cli, git, secrets-scanning, security. - [gitleaks](https://pkg.so/de/brew/gitleaks/) - Shares pkgdb curated category or tags: cli, git, security. - [git-crypt](https://pkg.so/de/brew/git-crypt/) - Shares pkgdb curated category or tags: cli, git, security. - [cycode](https://pkg.so/de/brew/cycode/) - Shares pkgdb curated category or tags: cli, secrets-scanning, security. - [ggshield](https://pkg.so/de/brew/ggshield/) - Shares pkgdb curated category or tags: cli, secrets-scanning, security. - [git-secrets](https://pkg.so/de/brew/git-secrets/) - Shares pkgdb curated category or tags: cli, git, security. - [git-secret](https://pkg.so/de/brew/git-secret/) - Shares pkgdb curated category or tags: cli, git, security. - [gopass](https://pkg.so/de/brew/gopass/) - Shares pkgdb curated category or tags: cli, git, security. - [noseyparker](https://pkg.so/de/brew/noseyparker/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, git, scanning, secrets, secrets-scanning. ## Combined YAML source View the package source record on GitHub. [combined/two-ms.yml](https://github.com/mxcl/pkgdb/blob/main/combined/two-ms.yml) ## Quellen - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - cross-ecosystem install command graph