# scrutineer mit Homebrew installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für scrutineer in AI-Agent-Workflows.

## Installation

```sh
sudo av install brew:scrutineer
```

Weitere Installationsbefehle:

### macOS

- Homebrew (100%):

```sh
brew install scrutineer
```

  Evidenz: local Homebrew formula metadata

## Paketfakten

- **Paketschlüssel:** brew:scrutineer
- **Paketmanager:** Homebrew
- **Version:** 2026.07.28.1
- **Quellzusammenfassung:** Security through scrutiny
- **Homepage:** <https://github.com/alpha-omega-security/scrutineer>
- **Repository:** <https://github.com/alpha-omega-security/scrutineer>
- **Zuletzt aktualisiert:** 2026-07-28T22:27:02Z
- **Generiert:** 2026-08-03T19:37:03+00:00

## Executables

- scrutineer (Alias)

## Installationsverhalten

- Bottle: nicht verfügbar

## Version und Aktualität

- Seite generiert: 2026-08-03
- Manager-Version: 2026.07.28.1
## Projektgeschichte und Nutzung

Scrutineer is a local application-security workbench that scans open-source repositories with configurable agent skills, containerized language profiles, conventional analysis tools, and human-gated vulnerability-disclosure workflows. It combines a CLI-launched service with a local web interface for triage, verification, reporting, and release tracking.

### Projektgeschichte

Alpha-Omega introduced the public Scrutineer repository in April 2026 to make repeatable, evidence-focused open-source security review practical without overwhelming maintainers with untriaged reports. The project was packaged as a Go executable with embedded skills and runner profiles, and its first public GitHub release was v2026.07.14.1 in July 2026.

### Adoptionsgeschichte

Scrutineer is an early-stage project. Its distribution includes precompiled Linux and macOS archives, source builds, container images, and a Homebrew formula; the official README also supports Docker, rootless Podman, and Apple's container runtime for isolated scans.

### Wie es verwendet wird

An operator starts Scrutineer, opens its local web UI, and adds a repository URL, organization, SBOM, external finding report, or local source directory. A triage skill fans out into metadata, dependency, advisory, static-analysis, threat-modeling, and model-backed audit tasks, after which the operator verifies findings and controls disclosure through explicit workflow gates.

### Warum Paket-Nerds sich dafür interessieren

Scrutineer treats package metadata as security context: it discovers manifests, builds SBOMs, looks up registry versions and dependents, checks advisories, and can import dependencies for deeper scans. Its per-ecosystem runner profiles cover common package managers and native-extension cases, making it especially relevant to maintainers interested in the boundary between package graphs, reproducible tooling, and vulnerability disclosure.

### Zeitleiste

- 2026-04: Public repository development began.
- 2026-07: First public GitHub release, v2026.07.14.1.

### Related projects

- Semgrep, zizmor, git-pkgs, and brief are integrated as conventional analysis and repository-inspection tools.
- Claude Code, Codex, and opencode are supported as pluggable agent backends.
- Docker, Podman, and Apple's container CLI provide the supported isolated runner environments.

### Quellen

- <https://alpha-omega.dev/blog/scrutineer-scanning-open-source-without-flooding-maintainers/>
- <https://github.com/alpha-omega-security/scrutineer>
- <https://github.com/alpha-omega-security/scrutineer/releases>
- source_facts.package-manager.brew


## Sicherheitshinweise

Für scrutineer wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ./scrutineer.yaml

## Combined YAML source

View the package source record on GitHub. [combined/scrutineer.yml](https://github.com/mxcl/pkgdb/blob/main/combined/scrutineer.yml)


## Quellen

- pkg.so package database
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph