# scrutineer を Homebrew でインストール scrutineer のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:scrutineer ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install scrutineer ``` 証拠: local Homebrew formula metadata ## パッケージ情報 - **パッケージキー:** brew:scrutineer - **パッケージマネージャ:** Homebrew - **バージョン:** 2026.07.28.1 - **ソース概要:** Security through scrutiny - **ホームページ:** - **リポジトリ:** - **最終更新:** 2026-07-28T22:27:02Z - **生成日時:** 2026-08-03T19:37:03+00:00 ## 実行可能ファイル - scrutineer (エイリアス) ## インストール挙動 - Bottle: 利用不可 ## バージョンと鮮度 - ページ生成日: 2026-08-03 - マネージャ版: 2026.07.28.1 ## プロジェクトの歴史と使われ方 Scrutineer is a local application-security workbench that scans open-source repositories with configurable agent skills, containerized language profiles, conventional analysis tools, and human-gated vulnerability-disclosure workflows. It combines a CLI-launched service with a local web interface for triage, verification, reporting, and release tracking. ### プロジェクトの歴史 Alpha-Omega introduced the public Scrutineer repository in April 2026 to make repeatable, evidence-focused open-source security review practical without overwhelming maintainers with untriaged reports. The project was packaged as a Go executable with embedded skills and runner profiles, and its first public GitHub release was v2026.07.14.1 in July 2026. ### 採用の歴史 Scrutineer is an early-stage project. Its distribution includes precompiled Linux and macOS archives, source builds, container images, and a Homebrew formula; the official README also supports Docker, rootless Podman, and Apple's container runtime for isolated scans. ### 使われ方 An operator starts Scrutineer, opens its local web UI, and adds a repository URL, organization, SBOM, external finding report, or local source directory. A triage skill fans out into metadata, dependency, advisory, static-analysis, threat-modeling, and model-backed audit tasks, after which the operator verifies findings and controls disclosure through explicit workflow gates. ### パッケージ好きにとっての重要性 Scrutineer treats package metadata as security context: it discovers manifests, builds SBOMs, looks up registry versions and dependents, checks advisories, and can import dependencies for deeper scans. Its per-ecosystem runner profiles cover common package managers and native-extension cases, making it especially relevant to maintainers interested in the boundary between package graphs, reproducible tooling, and vulnerability disclosure. ### タイムライン - 2026-04: Public repository development began. - 2026-07: First public GitHub release, v2026.07.14.1. ### Related projects - Semgrep, zizmor, git-pkgs, and brief are integrated as conventional analysis and repository-inspection tools. - Claude Code, Codex, and opencode are supported as pluggable agent backends. - Docker, Podman, and Apple's container CLI provide the supported isolated runner environments. ### ソース - - - - source_facts.package-manager.brew ## セキュリティノート scrutineer に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、Nucleus パッケージメタデータはここに公開されています。 ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ./scrutineer.yaml ## Combined YAML source View the package source record on GitHub. [combined/scrutineer.yml](https://github.com/mxcl/pkgdb/blob/main/combined/scrutineer.yml) ## ソース - pkg.so package database - curated configuration and credential file locations - curated package history - pkgdb category and tag curation - cross-ecosystem install command graph