# noseyparker を Homebrew, Nix でインストール noseyparker のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:noseyparker ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install noseyparker ``` 証拠: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#noseyparker ``` 証拠: nixpkgs package indexes: pkgs/by-name/no/noseyparker/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## パッケージ情報 - **パッケージキー:** brew:noseyparker - **パッケージマネージャ:** Homebrew - **バージョン:** 0.24.0 - **ソース概要:** Finds secrets and sensitive information in textual data and Git history - **ホームページ:** - **リポジトリ:** - **最終更新:** 2026-07-17T17:20:41+09:00 - **生成日時:** 2026-08-03T19:37:03+00:00 ## 実行可能ファイル - noseyparker (エイリアス) ## インストール挙動 - Bottle: 利用不可 ## バージョンと鮮度 - ページ生成日: 2026-08-03 - マネージャ版: 0.24.0 ## プロジェクトの歴史と使われ方 Nosey Parker is Praetorian's Apache-licensed secrets scanner for textual data and Git history. Its README documents scanning files, directories, full Git history, remote Git URLs, and GitHub users or organizations into a datastore, followed by reporting and triage. ### プロジェクトの歴史 The GitHub repository was created on 2022-11-08. Help Net Security reported on 2022-12-14 that Praetorian had open-sourced the regular-expression scanning capabilities of its internal Nosey Parker secret scanning tool. A 2023-03-03 Show HN post by the project author explained the older internal origin: Nosey Parker was originally created to help build a labeled dataset of secrets for machine-learning work, then proved useful on its own during Praetorian security engagements. The same post says it was reimplemented in Rust, released as open source in late 2022, and presented at Black Hat Arsenal. The public project evolved from Git-repository scanning toward broader data-source scanning. Praetorian's 2023 blog said it had gained arbitrary file and directory scanning, Docker and firmware image use cases, memory-dump scanning, and simple OSINT enumeration of GitHub organizations and users. The changelog later records SARIF output, extensible enumerators, deduplication, and many new token-specific rules. ### 採用の歴史 Nosey Parker's adoption niche is application security, cloud security, red-team, and SRE workflows that need high-throughput, lower-noise secret discovery. The project had thousands of GitHub stars by 2026-07-01, is packaged by Homebrew and Nix, and has a companion `noseyparker-explorer` TUI for reviewing and annotating findings. The repository was archived on GitHub on 2026-04-24, making the public repo read-only. That makes the package historically important but also changes its adoption posture: it remains available in package managers, but the upstream public development signal ended at the archive date unless Praetorian publishes a successor elsewhere. ### 使われ方 Practical use starts with `noseyparker scan` against a directory, local Git repository, remote Git URL, or GitHub user/org. The scan writes a datastore such as `cpython.np`; users then generate reports or inspect findings, with deduplication and rules intended to reduce false positives. The README example scans CPython Git history and reports throughput over Git blobs. The HN discussion emphasized Hyperscan-backed simultaneous regex matching as a core speed reason, and described Nosey Parker as especially useful where hardcoded credentials in source code, logs, and public repositories lead to real offensive-security findings. ### パッケージ好きにとっての重要性 Nosey Parker matters because it is a Rust security CLI that treats Git history as first-class input, not just the working tree. It packages secret scanning as a fast local binary with release assets, datastore output, SARIF/reporting paths, GitHub enumeration, and a separate explorer TUI for triage. ### タイムライン - 2022-11-08: GitHub repository created. - 2022-12-14: Praetorian open-source announcement covered by Help Net Security. - 2023-03-03: Show HN post described the Rust rewrite, open-source release, and Black Hat Arsenal presentation. - 2025-05-08: v0.24.0 release published. - 2026-04-24: GitHub repository archived and made read-only. ### Related projects - Related projects include noseyparker-explorer, Hyperscan, GitHub code search, trufflehog, Gitleaks, detect-secrets, and platform secret-scanning systems. ### ソース - - - - - - - - - ## セキュリティノート narrow executable package without higher-risk signals. - **Geiger リスク:** グリーン / 低 - narrow executable package without higher-risk signals ## 他のパッケージマネージャ記録 - Nix - noseyparker: normalized package name match | nixpkgs package indexes: pkgs/by-name/no/noseyparker/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Combined YAML source View the package source record on GitHub. [combined/noseyparker.yml](https://github.com/mxcl/pkgdb/blob/main/combined/noseyparker.yml) ## ソース - pkg.so package database - Geiger risk classifier - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph