# gotpm を Homebrew でインストール

gotpm のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:gotpm
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install gotpm
```

  証拠: local Homebrew formula metadata

## パッケージ情報

- **パッケージキー:** brew:gotpm
- **パッケージマネージャ:** Homebrew
- **バージョン:** 0.4.9
- **ソース概要:** CLI for using TPM 2.0
- **ホームページ:** <https://github.com/google/go-tpm-tools>
- **リポジトリ:** <https://github.com/google/go-tpm-tools>
- **最終更新:** 2026-07-25T20:55:27-04:00
- **生成日時:** 2026-08-03T19:37:03+00:00

## 実行可能ファイル

- gotpm (エイリアス)

## インストール挙動

- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-08-03
- マネージャ版: 0.4.9
## プロジェクトの歴史と使われ方

gotpm is the command-line companion in Google's go-tpm-tools repository, a TPM 2.0 support module built to sit above google/go-tpm. The repository packages higher-level client, server, protobuf, simulator, and CLI pieces for Go programs that need TPM signing, attestation, PCR reads, sealing, event-log handling, or related workflows.

### プロジェクトの歴史

go-tpm-tools dates to Google's 2018 TPM 2.0 work and explicitly narrows its scope to TPM 2.0 rather than TPM 1.2. The README frames the library as a complement to Go-TPM: Go-TPM supplies lower-level TPM access, while go-tpm-tools adds simplified APIs and workflows around attestation, signing, import, event logs, and server-side verification. gotpm is exposed from the same repository as the user-facing CLI for exercising TPM operations without writing Go code.

### 採用の歴史

The package-manager footprint is modest compared with broader security scanners, but the Homebrew formula and the repository's documented `go install github.com/google/go-tpm-tools/cmd/gotpm@latest` path made gotpm available to developers who wanted a Go-native TPM utility. Adoption is tied to hardware-backed security, confidential-computing, and attestation users rather than general-purpose shell workflows.

### 使われ方

gotpm is installed either with `go install` from the repository or by building the `cmd/gotpm` directory from a clone. The README directs users to `gotpm --help` and per-command help, while the surrounding packages document TPM 2.0 operations such as signing, attestation, PCR reads, sealing and unsealing, NV data reads, and TCG event-log handling.

### パッケージ好きにとっての重要性

For package maintainers, gotpm is a small but useful example of a hardware-facing Go CLI where distribution quality depends on CGO/OpenSSL simulator edges, Go toolchain support, and whether the host actually has TPM 2.0 access. It also sits in the package ecosystem around google/go-tpm, which matters for people tracking Go security tooling and reproducible attestation utilities.

### タイムライン

- 2018: Google copyright and repository metadata place go-tpm-tools in Google's TPM 2.0 support work.
- 2020: v0.2.1 release notes described signer improvements.
- 2021: v0.3.0 release notes emphasized attestation generation and verification.
- 2021: v0.3.0 prereleases previewed the larger attestation-oriented update series.

### Related projects

- google/go-tpm provides the lower-level TPM library that go-tpm-tools complements.
- Microsoft's TPM 2.0 simulator is used through the go-tpm-tools simulator bindings.
- Trusted Computing Group TPM 2.0 specifications define the hardware/security domain that the tool targets.

### ソース

- <https://api.github.com/repos/google/go-tpm-tools>
- <https://github.com/google/go-tpm-tools/releases>
- <https://raw.githubusercontent.com/google/go-tpm-tools/master/README.md>


## セキュリティノート

narrow executable package without higher-risk signals.

- **Geiger リスク:** グリーン / 低
- narrow executable package without higher-risk signals


## Combined YAML source

View the package source record on GitHub. [combined/gotpm.yml](https://github.com/mxcl/pkgdb/blob/main/combined/gotpm.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph