macOS
Homebrewverifiziert · 100%
brew install tfproviderchecklocal Homebrew formula metadata
brew / Rang 9706
tfprovidercheck mit Homebrew installieren
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für tfprovidercheck in AI-Agent-Workflows.
Installation
Weitere Installationsbefehle
Überblick
Paketzusammenfassung
CLI to prevent malicious Terraform Providers from being executed
Projektlinks
Befehle und Aliase
- tfprovidercheck
Verlauf
Projektgeschichte und Nutzung
tfprovidercheck is a Terraform provider allow-list checker intended to prevent disallowed or malicious Terraform providers from being executed. Its README positions it as a security and governance tool to run after terraform init and before commands such as validate, plan, or apply.
Projektgeschichte
The project was built around a simple policy model: read `terraform version -json`, compare provider names and optional version constraints against a YAML allow list, and fail when a disallowed provider appears. The README contrasts this with `.terraform.lock.hcl` and `required_providers`, arguing that those mechanisms do not provide the same centralized provider allow-list control.
Adoptionsgeschichte
Adoption appears concentrated in CI and platform-engineering contexts. Homebrew packages tfprovidercheck as a bottled formula, while the README emphasizes GitHub Actions usage and environment-variable configuration for workflows where pull requests should not be able to tamper with the policy.
Wie es verwendet wird
Typical usage pipes `terraform version -json` into `tfprovidercheck`, optionally passing `-config`. Configuration can come from a command-line path, `TFPROVIDERCHECK_CONFIG_BODY`, `TFPROVIDERCHECK_CONFIG`, or `.tfprovidercheck.yaml` in the current directory.
Warum Paket-Nerds sich dafür interessieren
For package-focused infrastructure users, tfprovidercheck is notable because it treats Terraform providers as executable dependencies that need admission control. It packages that check as a small CLI suitable for CI images, Homebrew installs, and repository policy workflows.
Zeitleiste
- 2025: GitHub tags list v1.0.6 in July and v1.0.7 in December.
- 2026: Homebrew formula metadata lists stable version 1.0.7 with bottled builds.
Related projects
- Terraform CLI
- .terraform.lock.hcl
- Terraform required_providers
- GitHub Actions
Quellen
Sicherheitslage
Risikostufe: grün
narrow executable package without higher-risk signals.
Risikoklassifikator
grün Risiko · niedrig Konfidenz · appliance
Warum
- narrow executable package without higher-risk signals
Signale
- metadata:no-higher-risk-signals
Installationsverhalten
- Es wurden keine Homebrew-Bottle-Metadaten erfasst.
Empfohlene Prüfung
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
.tfprovidercheck.yaml
Executables
Installierte Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
tfprovidercheck | Executable | indexiertes Executable | Aus dem lokalen Executable-Index erkannt. |
Aktualität
Version und Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Seite generiert2026-08-03
Manager-Version1.0.7
Manager aktualisiert2026-07-26
lokale Datenunbekannt
Upstreamnicht verfügbar
neueste erkannte Versionnicht erkannt
- OKEs wurden keine Aktualitätswarnungen generiert.
Installationsmetadaten
Paketmetadaten
| Paketschlüssel | brew:tfprovidercheck |
|---|---|
| Version | 1.0.7 |
| Paketmanager | Homebrew |
| Homepage | https://github.com/suzuki-shunsuke/tfprovidercheck |
| Repository | https://github.com/suzuki-shunsuke/tfprovidercheck |
| Zuletzt aktualisiert | 2026-07-26T00:50:39+02:00 |
| Pulse | updated |
| Bottle | nicht erfasst |
| Dienst | keiner deklariert |
Quellspur
Aus Repository-Daten generiert
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
Combined YAML source
View the package source record on GitHub.
Verwendete Quellen
- Geiger risk classifier
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- pkg.so package database
- pkgdb category and tag curation