# Installer frizbee avec Homebrew, zypper, winget Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de frizbee pour les workflows d'agents IA. ## installation ```sh sudo av install brew:frizbee ``` Commandes d'installation supplémentaires: ### macOS - Homebrew (100%): ```sh brew install frizbee ``` Preuve: local Homebrew formula metadata ### Linux - zypper (92%): ```sh sudo zypper install frizbee ``` Preuve: openSUSE Tumbleweed package metadata: frizbee from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ### Windows - winget (92%): ```sh winget install --id stacklok.frizbee -e ``` Preuve: Windows Package Manager source index: stacklok.frizbee from https://cdn.winget.microsoft.com/cache/source.msix ## Faits du paquet - **Clé du paquet:** brew:frizbee - **Gestionnaire de paquets:** Homebrew - **Page du gestionnaire de paquets:** - **Version:** 0.1.10 - **Résumé source:** Throw a tag at and it comes back with a checksum - **Page d'accueil:** - **Dépôt:** - **Licence:** Apache-2.0 - **Archive source:** - **Dernière mise à jour:** 2026-07-26T11:37:58+02:00 - **Généré:** 2026-08-04T22:13:35+00:00 ## exécutables - frizbee (cli) - frizbee (alias) ## Dépendances de compilation - go ## Comportement d'installation - hook post-installation: non défini - Bouteille: disponible sur arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Version et fraîcheur - page générée: 2026-08-04 - version du gestionnaire: 0.1.10 - gestionnaire mis à jour: 2026-07-26 - données locales: OK - dépôt amont: https://github.com/stacklok/frizbee - dernière version détectée: v0.1.10 (à jour) ## Historique du projet et usages Frizbee is a Stacklok command-line tool and Go library for resolving mutable tags to checksums. Its README describes it as a tool that can take a GitHub Actions reference or container image tag and return a checksum or digest suitable for more reproducible supply-chain references. ### Historique du projet Frizbee is maintained in the `stacklok/frizbee` GitHub repository and is written in Go. Official release metadata gathered during research showed a young 0.x project, with v0.0.x and v0.1.x releases from 2024 onward and v0.1.10 published in 2026. ### Historique d'adoption The README documents installation through Go, Homebrew, and winget, and presents Frizbee as both a CLI and a library. It also points to a Frizbee GitHub Action, placing the project in the GitHub Actions and container-image hardening workflow rather than general-purpose checksum utilities. ### Modes d'utilisation For GitHub Actions, users can point `frizbee actions` at workflow files or a single action reference to generate replacements and optionally run in dry-run or CI-failing modes. For container images, users can point `frizbee image` at YAML, Dockerfile paths, or a single image tag to get a digest-pinned reference. The library API exposes replacers for GitHub Actions and container images, with functions for parsing strings, paths, files, and filesystem abstractions. ### Pourquoi les passionnés de paquets s'y intéressent Frizbee is package-nerd significant as a small supply-chain utility focused on a common packaging and CI problem: tags are convenient but mutable, while checksums and digests are auditable. It sits near Dependabot-style maintenance, GitHub Actions pinning, container digest pinning, and policy enforcement in CI. Its value as a packaged CLI is that it can be dropped into local workflows or CI jobs without a larger platform, while the library form lets other tools reuse the tag-to-checksum logic. ### Chronologie - 2024: Official releases include early v0.0.x and v0.1.x Frizbee builds. - 2024: The README documents installation via Go, Homebrew, and winget and usage for GitHub Actions and container images. - 2026: Official releases include Frizbee v0.1.10. ### Related projects - Related surfaces include GitHub Actions, the Frizbee GitHub Action, container registries, image digest pinning, and Stacklok supply-chain tooling. - The CLI's work overlaps with CI policy, tag pinning, reproducible builds, and tools that rewrite workflow or manifest files to less mutable references. ### Sources - - - ## Notes de sécurité narrow executable package without higher-risk signals. - **Risque Geiger:** vert / faible - narrow executable package without higher-risk signals ## Détails de la base source - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** frizbee - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Autres enregistrements de gestionnaires de paquets - zypper - frizbee - 0.1.10-1.5: normalized package name match | openSUSE Tumbleweed package metadata: frizbee from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Throw a tag at and it comes back with a checksum | https://github.com/stacklok/frizbee - zypper - frizbee-bash-completion - 0.1.10-1.5: normalized package name match | openSUSE Tumbleweed package metadata: frizbee-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Bash Completion for frizbee | https://github.com/stacklok/frizbee - zypper - frizbee-fish-completion - 0.1.10-1.5: normalized package name match | openSUSE Tumbleweed package metadata: frizbee-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Fish Completion for frizbee | https://github.com/stacklok/frizbee - zypper - frizbee-zsh-completion - 0.1.10-1.5: normalized package name match | openSUSE Tumbleweed package metadata: frizbee-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Zsh Completion for frizbee | https://github.com/stacklok/frizbee - winget - stacklok.frizbee: normalized package name match | Windows Package Manager source index: stacklok.frizbee from https://cdn.winget.microsoft.com/cache/source.msix ## Liens liés - [Source-control packages](https://pkg.so/fr/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://pkg.so/fr/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/fr/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://pkg.so/fr/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [go](https://pkg.so/fr/brew/go/) - Build dependency declared by Homebrew. - [zizmor](https://pkg.so/fr/brew/zizmor/) - Shares pkgdb curated category or tags: cli, github-actions, security. - [osv-scanner](https://pkg.so/fr/brew/osv-scanner/) - Shares pkgdb curated category or tags: cli, security, supply-chain. - [md5sha1sum](https://pkg.so/fr/brew/md5sha1sum/) - Shares pkgdb curated category or tags: checksums, cli, security. - [md5deep](https://pkg.so/fr/brew/md5deep/) - Shares pkgdb curated category or tags: checksums, cli, security. - [npq](https://pkg.so/fr/brew/npq/) - Shares pkgdb curated category or tags: cli, security, supply-chain. - [pip-audit](https://pkg.so/fr/brew/pip-audit/) - Shares pkgdb curated category or tags: cli, security, supply-chain. - [scorecard](https://pkg.so/fr/brew/scorecard/) - Shares pkgdb curated category or tags: cli, security, supply-chain. - [ghalint](https://pkg.so/fr/brew/ghalint/) - Shares pkgdb curated category or tags: cli, github-actions, security. - [ratchet](https://pkg.so/fr/brew/ratchet/) - Security-sensitive metadata or terminology overlaps. Shared terms: chain, cli, pinning, security, supply. ## Combined YAML source View the package source record on GitHub. [combined/frizbee.yml](https://github.com/mxcl/pkgdb/blob/main/combined/frizbee.yml) ## Sources - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph