# threatcl を Homebrew でインストール

threatcl のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:threatcl
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install threatcl
```

  証拠: local Homebrew formula metadata

## パッケージ情報

- **パッケージキー:** brew:threatcl
- **パッケージマネージャ:** Homebrew
- **バージョン:** 0.6.5
- **ソース概要:** Documenting your Threat Models with HCL
- **ホームページ:** <https://github.com/threatcl/threatcl>
- **リポジトリ:** <https://github.com/threatcl/threatcl>
- **最終更新:** 2026-08-01T13:15:26Z
- **生成日時:** 2026-08-03T19:37:03+00:00

## 実行可能ファイル

- threatcl (エイリアス)

## インストール挙動

- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-08-03
- マネージャ版: 0.6.5
## プロジェクトの歴史と使われ方

threatcl is a command-line tool and HCL-based specification for documenting threat models in text files. The official README says the project was formerly named hcltm and was renamed to threatcl.

### プロジェクトの歴史

The project frames threat modeling as a DevOps and version-control workflow: its README argues for a simple text-file format, a CLI-driven user experience, and integration with VCS. It builds on HashiCorp Configuration Language and the README explicitly connects that choice to Terraform familiarity and machine-readable structure.

### 採用の歴史

The official documentation positions threatcl for several installation and automation paths: Homebrew, Go install, Docker, and GitHub Actions. The README also documents release provenance through SLSA and GitHub attestations, which fits the security-tooling audience that may want to verify downloaded binaries and container images.

### 使われ方

Users write threat models in HCL, then use the CLI to validate, list, view, export, query, generate dashboards, render data-flow diagrams, parse Terraform output, or run a server. The optional `config.hcl` file can override default classifications, impact types, STRIDE elements, and dependency classifications.

### パッケージ好きにとっての重要性

For package nerds, threatcl is notable because it turns a security documentation practice into a normal source-controlled artifact with a CLI, Homebrew install, container image, GitHub Action, release attestations, and HCL syntax familiar to infrastructure engineers.

### タイムライン

- Project README: hcltm is renamed to threatcl.
- Current README: documents Homebrew, Docker, GitHub Actions, SLSA attestations, HCL threat models, GraphQL queries, Terraform parsing, and optional config.hcl.
- Current docs site: documents Homebrew, Go, Docker, and GitHub Actions getting-started flows.

### Related projects

- Related projects and specifications include Terraform and HCL2, OWASP threat-modeling material, OpenThreatModel, go-dfd, GitHub Actions automation, and security-as-code workflows.

### ソース

- <https://github.com/threatcl/threatcl#readme - official README for rename from hcltm, goals, HCL basis, CLI commands, Homebrew install, release provenance, and config.hcl.>
- <https://threatcl.dev/ - official documentation site for getting started, Homebrew/Go/Docker/GitHub Actions installs, and example threat model.>


## セキュリティノート

threatcl に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、Nucleus パッケージメタデータはここに公開されています。



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: config.hcl

## Combined YAML source

View the package source record on GitHub. [combined/threatcl.yml](https://github.com/mxcl/pkgdb/blob/main/combined/threatcl.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph