# legitify を Homebrew, Nix でインストール legitify のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:legitify ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install legitify ``` 証拠: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#legitify ``` 証拠: nixpkgs package indexes: pkgs/by-name/le/legitify/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## パッケージ情報 - **パッケージキー:** brew:legitify - **パッケージマネージャ:** Homebrew - **パッケージマネージャページ:** - **バージョン:** 1.0.11 - **ソース概要:** Tool to detect/remediate misconfig and security risks of GitHub/GitLab assets - **ホームページ:** - **リポジトリ:** - **上流ドキュメント:** - **ライセンス:** Apache-2.0 - **ソースアーカイブ:** - **最終更新:** 2026-07-26T13:41:01+02:00 - **生成日時:** 2026-08-04T22:13:35+00:00 ## 実行可能ファイル - legitify (cli) - legitify (エイリアス) ## ビルド依存関係 - go@1.24 ## インストール挙動 - post-install フック: 未定義 - Bottle: 利用可能 対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## バージョンと鮮度 - ページ生成日: 2026-08-04 - マネージャ版: 1.0.11 - マネージャ更新日: 2026-07-26 - ローカルデータ: OK - 上流リポジトリ: https://github.com/Legit-Labs/legitify - 検出された最新: v1.0.11 (最新) ## プロジェクトの歴史と使われ方 Legitify is Legit Security's open-source CLI for finding and helping remediate security, compliance, and misconfiguration risks across GitHub and GitLab assets. ### プロジェクトの歴史 Legit Security announced Legitify on 2022-10-05 as an open-source GitHub configuration scanner for security, DevOps, and developer teams. The repository and project site later described the scope as source-code-management posture across GitHub and GitLab assets, with built-in policies and remediation-oriented output. ### 採用の歴史 The project was packaged as a standalone CLI, GitHub Action, Homebrew formula, Nix package, and GitHub CLI extension. That mix made it fit both one-off audits from a workstation and scheduled checks in CI for organizations managing many repositories, members, teams, runners, branch protections, and tokens. ### 使われ方 Typical usage is to authenticate to GitHub or GitLab, run `legitify analyze`, and review policy findings against repositories, organizations, runners, webhooks, actions, branch protection, and other SCM resources. Its Homebrew packaging matters because security teams can hand developers a familiar install path instead of a vendor-only SaaS workflow. ### パッケージ好きにとっての重要性 Legitify is a package-nerd example of application-security posture management ideas escaping into a plain CLI. It packages policy checks and remediation hints as a tool that can live in local shells, CI jobs, and GitHub Actions, adjacent to linters and secret scanners. ### タイムライン - 2022-07-26: The GitHub issue tracker showed early public project activity. - 2022-10-05: Legit Security published the introductory Legitify announcement. - 2023-01-19: Public issues tracked expansion into third-party application policies. - 2023-02-06: Public issues tracked auto-remediation work. ### Related projects - Related projects include the `gh-legitify` GitHub CLI extension, the Legitify GitHub Action, OpenSSF Scorecard, GitHub Advanced Security configuration checks, GitLab security scanners, and policy-as-code tools used for SCM governance. ### ソース - - - - - - - ## セキュリティノート broad file, network, media, or database tool signal. - **Geiger リスク:** blue / 中 - broad file, network, media, or database tool signal ## ソースデータベース詳細 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** legitify - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** yes - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## 他のパッケージマネージャ記録 - Nix - legitify: normalized package name match | nixpkgs package indexes: pkgs/by-name/le/legitify/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## 関連リンク - [Source-control packages](https://pkg.so/ja/source-control-tools/) - Belongs to a source-control command family. - [Secret-risk packages](https://pkg.so/ja/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://pkg.so/ja/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/ja/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [lacework-cli](https://pkg.so/ja/brew/lacework-cli/) - Shares pkgdb curated category or tags: cli, cloud-security, security. - [cfripper](https://pkg.so/ja/brew/cfripper/) - Shares pkgdb curated category or tags: cli, cloud-security, security. - [s3scanner](https://pkg.so/ja/brew/s3scanner/) - Shares pkgdb curated category or tags: cli, cloud-security, security. - [parliament](https://pkg.so/ja/brew/parliament/) - Shares pkgdb curated category or tags: cli, cloud-security, security. - [prowler](https://pkg.so/ja/brew/prowler/) - Shares pkgdb curated category or tags: cli, cloud-security, security. - [kics](https://pkg.so/ja/brew/kics/) - Shares pkgdb curated category or tags: cli, misconfiguration, security. - [scoutsuite](https://pkg.so/ja/brew/scoutsuite/) - Shares pkgdb curated category or tags: cli, cloud-security, security. - [cloudfox](https://pkg.so/ja/brew/cloudfox/) - Shares pkgdb curated category or tags: cli, cloud-security, security. ## Combined YAML source View the package source record on GitHub. [combined/legitify.yml](https://github.com/mxcl/pkgdb/blob/main/combined/legitify.yml) ## ソース - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph