scrutineer を Homebrew でインストール

プロジェクトリンク

• ホームページ

コマンドとエイリアス

• scrutineer

プロジェクトの歴史

Alpha-Omega introduced the public Scrutineer repository in April 2026 to make repeatable, evidence-focused open-source security review practical without overwhelming maintainers with untriaged reports. The project was packaged as a Go executable with embedded skills and runner profiles, and its first public GitHub release was v2026.07.14.1 in July 2026.

採用の歴史

Scrutineer is an early-stage project. Its distribution includes precompiled Linux and macOS archives, source builds, container images, and a Homebrew formula; the official README also supports Docker, rootless Podman, and Apple's container runtime for isolated scans.

使われ方

An operator starts Scrutineer, opens its local web UI, and adds a repository URL, organization, SBOM, external finding report, or local source directory. A triage skill fans out into metadata, dependency, advisory, static-analysis, threat-modeling, and model-backed audit tasks, after which the operator verifies findings and controls disclosure through explicit workflow gates.

パッケージ好きにとっての重要性

Scrutineer treats package metadata as security context: it discovers manifests, builds SBOMs, looks up registry versions and dependents, checks advisories, and can import dependencies for deeper scans. Its per-ecosystem runner profiles cover common package managers and native-extension cases, making it especially relevant to maintainers interested in the boundary between package graphs, reproducible tooling, and vulnerability disclosure.

タイムライン

• 2026-04: Public repository development began.
• 2026-07: First public GitHub release, v2026.07.14.1.

Related projects

• Semgrep, zizmor, git-pkgs, and brief are integrated as conventional analysis and repository-inspection tools.
• Claude Code, Codex, and opencode are supported as pluggable agent backends.
• Docker, Podman, and Apple's container CLI provide the supported isolated runner environments.

ソース

• https://alpha-omega.dev/blog/scrutineer-scanning-open-source-without-flooding-maintainers/
• https://github.com/alpha-omega-security/scrutineer
• https://github.com/alpha-omega-security/scrutineer/releases
• source_facts.package-manager.brew