# Installer frizbee avec Homebrew, zypper, winget Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de frizbee pour les workflows d'agents IA. ## installation ```sh sudo av install brew:frizbee ``` Commandes d'installation supplémentaires: ### macOS - Homebrew (100%): ```sh brew install frizbee ``` Preuve: local Homebrew formula metadata ### Linux - zypper (92%): ```sh sudo zypper install frizbee ``` Preuve: openSUSE Tumbleweed package metadata: frizbee from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ### Windows - winget (92%): ```sh winget install --id stacklok.frizbee -e ``` Preuve: Windows Package Manager source index: stacklok.frizbee from https://cdn.winget.microsoft.com/cache/source.msix ## Faits du paquet - **Clé du paquet:** brew:frizbee - **Gestionnaire de paquets:** Homebrew - **Version:** 0.1.10 - **Résumé source:** Throw a tag at and it comes back with a checksum - **Page d'accueil:** - **Dépôt:** - **Dernière mise à jour:** 2026-07-26T11:37:58+02:00 - **Généré:** 2026-08-03T19:37:03+00:00 ## exécutables - frizbee (alias) ## Comportement d'installation - Bouteille: non disponible ## Version et fraîcheur - page générée: 2026-08-03 - version du gestionnaire: 0.1.10 ## Historique du projet et usages Frizbee is a Stacklok command-line tool and Go library for resolving mutable tags to checksums. Its README describes it as a tool that can take a GitHub Actions reference or container image tag and return a checksum or digest suitable for more reproducible supply-chain references. ### Historique du projet Frizbee is maintained in the `stacklok/frizbee` GitHub repository and is written in Go. Official release metadata gathered during research showed a young 0.x project, with v0.0.x and v0.1.x releases from 2024 onward and v0.1.10 published in 2026. ### Historique d'adoption The README documents installation through Go, Homebrew, and winget, and presents Frizbee as both a CLI and a library. It also points to a Frizbee GitHub Action, placing the project in the GitHub Actions and container-image hardening workflow rather than general-purpose checksum utilities. ### Modes d'utilisation For GitHub Actions, users can point `frizbee actions` at workflow files or a single action reference to generate replacements and optionally run in dry-run or CI-failing modes. For container images, users can point `frizbee image` at YAML, Dockerfile paths, or a single image tag to get a digest-pinned reference. The library API exposes replacers for GitHub Actions and container images, with functions for parsing strings, paths, files, and filesystem abstractions. ### Pourquoi les passionnés de paquets s'y intéressent Frizbee is package-nerd significant as a small supply-chain utility focused on a common packaging and CI problem: tags are convenient but mutable, while checksums and digests are auditable. It sits near Dependabot-style maintenance, GitHub Actions pinning, container digest pinning, and policy enforcement in CI. Its value as a packaged CLI is that it can be dropped into local workflows or CI jobs without a larger platform, while the library form lets other tools reuse the tag-to-checksum logic. ### Chronologie - 2024: Official releases include early v0.0.x and v0.1.x Frizbee builds. - 2024: The README documents installation via Go, Homebrew, and winget and usage for GitHub Actions and container images. - 2026: Official releases include Frizbee v0.1.10. ### Related projects - Related surfaces include GitHub Actions, the Frizbee GitHub Action, container registries, image digest pinning, and Stacklok supply-chain tooling. - The CLI's work overlaps with CI policy, tag pinning, reproducible builds, and tools that rewrite workflow or manifest files to less mutable references. ### Sources - - - ## Notes de sécurité narrow executable package without higher-risk signals. - **Risque Geiger:** vert / faible - narrow executable package without higher-risk signals ## Autres enregistrements de gestionnaires de paquets - zypper - frizbee - 0.1.10-1.5: normalized package name match | openSUSE Tumbleweed package metadata: frizbee from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Throw a tag at and it comes back with a checksum | https://github.com/stacklok/frizbee - zypper - frizbee-bash-completion - 0.1.10-1.5: normalized package name match | openSUSE Tumbleweed package metadata: frizbee-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Bash Completion for frizbee | https://github.com/stacklok/frizbee - zypper - frizbee-fish-completion - 0.1.10-1.5: normalized package name match | openSUSE Tumbleweed package metadata: frizbee-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Fish Completion for frizbee | https://github.com/stacklok/frizbee - zypper - frizbee-zsh-completion - 0.1.10-1.5: normalized package name match | openSUSE Tumbleweed package metadata: frizbee-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Zsh Completion for frizbee | https://github.com/stacklok/frizbee - winget - stacklok.frizbee: normalized package name match | Windows Package Manager source index: stacklok.frizbee from https://cdn.winget.microsoft.com/cache/source.msix ## Combined YAML source View the package source record on GitHub. [combined/frizbee.yml](https://github.com/mxcl/pkgdb/blob/main/combined/frizbee.yml) ## Sources - pkg.so package database - Geiger risk classifier - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph