# Installer tfprovidercheck avec Homebrew

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de tfprovidercheck pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:tfprovidercheck
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install tfprovidercheck
```

  Preuve: local Homebrew formula metadata

## Faits du paquet

- **Clé du paquet:** brew:tfprovidercheck
- **Gestionnaire de paquets:** Homebrew
- **Page du gestionnaire de paquets:** <https://formulae.brew.sh/formula/tfprovidercheck>
- **Version:** 1.0.7
- **Résumé source:** CLI to prevent malicious Terraform Providers from being executed
- **Page d'accueil:** <https://github.com/suzuki-shunsuke/tfprovidercheck>
- **Dépôt:** <https://github.com/suzuki-shunsuke/tfprovidercheck>
- **Licence:** MIT
- **Archive source:** <https://github.com/suzuki-shunsuke/tfprovidercheck/archive/refs/tags/v1.0.7.tar.gz>
- **Dernière mise à jour:** 2026-07-26T00:50:39+02:00
- **Généré:** 2026-08-04T22:13:35+00:00

## exécutables

- tfprovidercheck (cli)
- tfprovidercheck (alias)

## Dépendances de compilation

- go

## Comportement d'installation

- hook post-installation: non défini
- Bouteille: disponible sur arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## Version et fraîcheur

- page générée: 2026-08-04
- version du gestionnaire: 1.0.7
- gestionnaire mis à jour: 2026-07-26
- données locales: OK
- dépôt amont: https://github.com/suzuki-shunsuke/tfprovidercheck
- dernière version détectée: v1.0.7 (à jour)
## Historique du projet et usages

tfprovidercheck is a Terraform provider allow-list checker intended to prevent disallowed or malicious Terraform providers from being executed. Its README positions it as a security and governance tool to run after terraform init and before commands such as validate, plan, or apply.

### Historique du projet

The project was built around a simple policy model: read `terraform version -json`, compare provider names and optional version constraints against a YAML allow list, and fail when a disallowed provider appears. The README contrasts this with `.terraform.lock.hcl` and `required_providers`, arguing that those mechanisms do not provide the same centralized provider allow-list control.

### Historique d'adoption

Adoption appears concentrated in CI and platform-engineering contexts. Homebrew packages tfprovidercheck as a bottled formula, while the README emphasizes GitHub Actions usage and environment-variable configuration for workflows where pull requests should not be able to tamper with the policy.

### Modes d'utilisation

Typical usage pipes `terraform version -json` into `tfprovidercheck`, optionally passing `-config`. Configuration can come from a command-line path, `TFPROVIDERCHECK_CONFIG_BODY`, `TFPROVIDERCHECK_CONFIG`, or `.tfprovidercheck.yaml` in the current directory.

### Pourquoi les passionnés de paquets s'y intéressent

For package-focused infrastructure users, tfprovidercheck is notable because it treats Terraform providers as executable dependencies that need admission control. It packages that check as a small CLI suitable for CI images, Homebrew installs, and repository policy workflows.

### Chronologie

- 2025: GitHub tags list v1.0.6 in July and v1.0.7 in December.
- 2026: Homebrew formula metadata lists stable version 1.0.7 with bottled builds.

### Related projects

- Terraform CLI
- .terraform.lock.hcl
- Terraform required_providers
- GitHub Actions

### Sources

- <https://formulae.brew.sh/api/formula/tfprovidercheck.json>
- <https://github.com/suzuki-shunsuke/tfprovidercheck#readme>
- <https://github.com/suzuki-shunsuke/tfprovidercheck/tags>


## Notes de sécurité

narrow executable package without higher-risk signals.

- **Risque Geiger:** vert / faible
- narrow executable package without higher-risk signals


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: .tfprovidercheck.yaml
## Détails de la base source

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** tfprovidercheck
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable


## Liens liés

- [Cloud CLI packages](https://pkg.so/fr/cloud-clis/) - Belongs to a cloud or infrastructure command family.
- [Source-control packages](https://pkg.so/fr/source-control-tools/) - Belongs to a source-control command family.
- [Terminal utility packages](https://pkg.so/fr/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://pkg.so/fr/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [go](https://pkg.so/fr/brew/go/) - Build dependency declared by Homebrew.
- [checkov](https://pkg.so/fr/brew/checkov/) - Shares pkgdb curated category or tags: cli, infrastructure-as-code, security, terraform.
- [tfsec](https://pkg.so/fr/brew/tfsec/) - Shares pkgdb curated category or tags: cli, security, terraform.
- [kics](https://pkg.so/fr/brew/kics/) - Shares pkgdb curated category or tags: cli, infrastructure-as-code, security.
- [terrascan](https://pkg.so/fr/brew/terrascan/) - Shares pkgdb curated category or tags: cli, security, terraform.
- [terraform-iam-policy-validator](https://pkg.so/fr/brew/terraform-iam-policy-validator/) - Shares pkgdb curated category or tags: cli, security, terraform.
- [openssl@3](https://pkg.so/fr/brew/openssl-3/) - Shares pkgdb curated category or tags: cli, security.
- [gnutls](https://pkg.so/fr/brew/gnutls/) - Shares pkgdb curated category or tags: cli, security.
- [p11-kit](https://pkg.so/fr/brew/p11-kit/) - Shares pkgdb curated category or tags: cli, security.
- [ripsecrets](https://pkg.so/fr/brew/ripsecrets/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, code, prevent, security.
- [anti-trojan-source](https://pkg.so/fr/npm/anti-trojan-source/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, code, malicious, security.

## Combined YAML source

View the package source record on GitHub. [combined/tfprovidercheck.yml](https://github.com/mxcl/pkgdb/blob/main/combined/tfprovidercheck.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- package-page enrichment
- curated configuration and credential file locations
- curated package history
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- cross-ecosystem install command graph