# credstash mit Homebrew, Nix installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für credstash in AI-Agent-Workflows.

## Installation

```sh
sudo av install brew:credstash
```

Weitere Installationsbefehle:

### macOS

- Homebrew (100%):

```sh
brew install credstash
```

  Evidenz: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#credstash
```

  Evidenz: nixpkgs package indexes: credstash from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix

## Paketfakten

- **Paketschlüssel:** brew:credstash
- **Paketmanager:** Homebrew
- **Version:** 1.17.1
- **Quellzusammenfassung:** Little utility for managing credentials in the cloud
- **Homepage:** <https://github.com/fugue/credstash>
- **Repository:** <https://github.com/fugue/credstash>
- **Zuletzt aktualisiert:** 2026-05-12T19:39:56Z
- **Generiert:** 2026-08-03T19:37:03+00:00

## Executables

- credstash (Alias)
- credstash.py (Alias)

## Installationsverhalten

- Bottle: nicht verfügbar

## Version und Aktualität

- Seite generiert: 2026-08-03
- Manager-Version: 1.17.1
## Projektgeschichte und Nutzung

CredStash is a small command-line and Python-library tool for storing secrets with AWS KMS and DynamoDB. It targets teams that want a simple credential store without operating a larger dedicated secrets-management service.

### Projektgeschichte

The README frames CredStash as a response to common ad hoc secret-handling practices such as copying secrets files around a fleet or committing secrets to source control. Its design uses KMS for key wrapping and master-key storage, DynamoDB for encrypted credential records, and AWS IAM for access control.

### Adoptionsgeschichte

The project grew beyond a single Python command-line tool through compatible implementations in Java, Ruby, Scala, PHP, Node.js, Go, C#, Erlang, Rust, and Kubernetes-related tooling listed by the upstream README. Later changelog entries also added operational features such as tags, putall, keys, session handling, YAML and dotenv-style output, and multiple-region KMS/DynamoDB support.

### Wie es verwendet wird

The standard setup is to install credstash, create or choose a KMS key, ensure AWS credentials are available to boto or botocore, and run credstash setup to create the DynamoDB table. Users then put, get, list, delete, and bulk-fetch versioned secrets from shell scripts or deployment workflows.

### Warum Paket-Nerds sich dafür interessieren

For package maintainers, CredStash is notable as an AWS-backed secrets CLI that keeps its runtime footprint small but relies on cloud-side primitives. Its Homebrew formula exposes a Python security tool to macOS operators who may otherwise install it from pip.

### Zeitleiste

- 2015-12: README documents an auto-versioning behavior change and migration path for older unpadded integer versions
- 1.14.0: Added wildcard get, keys, putall, and pagination fixes
- 1.15.0: Improved packaging and added credential comments
- 1.16.0: Added autoversion API support, DynamoDB table tagging, environment-variable table selection, and custom DynamoDB/KMS sessions
- 1.17.0: Added independent KMS-region selection for DynamoDB Global Tables-style deployments

### Related projects

- The README lists compatible CredStash implementations for Java, Ruby, Scala, PHP, Node.js, Go, C#, Erlang, Rust, and Kubernetes.

### Quellen

- <https://github.com/fugue/credstash#readme>
- <https://github.com/fugue/credstash/blob/master/changelog.md>


## Sicherheitshinweise

infrastructure mutation or orchestration signal.

- **Geiger-Risiko:** orange / mittel
- infrastructure mutation or orchestration signal


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ~/.aws/config

## Credential files

- Unix: ~/.aws/credentials
## Andere Paketmanager-Einträge

- Nix - credstash: normalized package name match | nixpkgs package indexes: credstash from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix


## Combined YAML source

View the package source record on GitHub. [combined/credstash.yml](https://github.com/mxcl/pkgdb/blob/main/combined/credstash.yml)


## Quellen

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph