# Installer cfripper avec Homebrew, Nix

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de cfripper pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:cfripper
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install cfripper
```

  Preuve: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#cfripper
```

  Preuve: nixpkgs package indexes: pkgs/by-name/cf/cfripper/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## Faits du paquet

- **Clé du paquet:** brew:cfripper
- **Gestionnaire de paquets:** Homebrew
- **Version:** 1.21.0
- **Résumé source:** Library and CLI tool to analyse CloudFormation templates for security issues
- **Page d'accueil:** <https://cfripper.readthedocs.io>
- **Dernière mise à jour:** 2026-07-01T15:27:38Z
- **Généré:** 2026-08-03T19:37:03+00:00

## exécutables

- cfripper (alias)

## Comportement d'installation

- Bouteille: non disponible

## Version et fraîcheur

- page générée: 2026-08-03
- version du gestionnaire: 1.21.0
## Historique du projet et usages

CFRipper is a Skyscanner library and CLI for analyzing AWS CloudFormation templates for security and compliance issues. The official README describes it as a way to prevent deploying insecure AWS resources and to add custom compliance plugins.

### Historique du projet

The official GitHub repository was created in July 2018. Its documentation presents CFRipper as both a library and command-line analyzer, with examples for scanning CloudFormation YAML or JSON templates, resolving references, emitting text or JSON output, and loading custom rule configuration.

The project sits in the CloudFormation security-analysis niche rather than the general linting niche: its examples focus on wildcard principals, overprivileged IAM roles, monitored issues, and compliance rule customization.

### Historique d'adoption

Official documentation is published on Read the Docs, the README advertises PyPI and Homebrew badges, and the package metadata in this batch shows Homebrew and Nix packaging.

CFRipper's adoption is tied to security review workflows for CloudFormation templates: it is useful before deployment, in CI, or as a library embedded in custom cloud-governance checks.

### Modes d'utilisation

The README documents running `cfripper` against one or more CloudFormation templates, choosing `txt` or `json` output, using `--resolve`, writing results with `--output-folder`, and passing custom rules config or rules filter folders.

The official docs show rules config files as command inputs rather than a fixed application config location, so `config-file-location` remains null. No official credential file location is documented for the CLI.

### Pourquoi les passionnés de paquets s'y intéressent

CFRipper is notable because it packages cloud-security review into an ordinary CLI: a repository can add it to pre-deploy checks without first building an internal CloudFormation parser and IAM rule engine.

It also shows the common packaging path for Python security tools: library plus CLI, PyPI first, then Homebrew or Nix for operators who want a standalone command.

### Chronologie

- 2018: The Skyscanner/cfripper repository is created on GitHub.
- 2018: The project documents CloudFormation security analysis and custom compliance plugins.
- 2026: The repository and Read the Docs site remain the official documentation surfaces.

### Related projects

- AWS CloudFormation templates are the artifacts CFRipper analyzes.
- IAM policy and principal rules are central to the README examples.
- cfn-lint is an adjacent CloudFormation validation tool, while CFRipper focuses on security and compliance rules.

### Sources

- <https://api.github.com/repos/Skyscanner/cfripper>
- <https://github.com/Skyscanner/cfripper>
- <https://cfripper.readthedocs.io>
- <https://cfripper.readthedocs.io/>
- <https://formulae.brew.sh/api/formula/cfripper.json>


## Notes de sécurité

infrastructure mutation or orchestration signal.

- **Risque Geiger:** orange / moyen
- infrastructure mutation or orchestration signal

## Autres enregistrements de gestionnaires de paquets

- Nix - cfripper: normalized package name match | nixpkgs package indexes: pkgs/by-name/cf/cfripper/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/cfripper.yml](https://github.com/mxcl/pkgdb/blob/main/combined/cfripper.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph