macOS
Homebrewverified · 100%
brew install frizbeelocal Homebrew formula metadata
brew / rank 7293
Install frizbee with Homebrew, zypper, winget
Throw a tag at and it comes back with a checksum. Version 0.1.10 via Homebrew; verified 2026-07-26. Also installable with zypper: sudo zypper install frizbee.
install
Additional install commands
Linux
openSUSE zypperverified · 92%
sudo zypper install frizbeeopenSUSE Tumbleweed package metadata · frizbee · source: download.opensuse.org
Windows
Windows Package Managerverified · 92%
winget install --id stacklok.frizbee -eWindows Package Manager source index · stacklok.frizbee · source: cdn.winget.microsoft.com
overview
Package summary
Throw a tag at and it comes back with a checksum
Project links
Commands and aliases
- frizbee
history
Project history and usage
Frizbee is a Stacklok command-line tool and Go library for resolving mutable tags to checksums. Its README describes it as a tool that can take a GitHub Actions reference or container image tag and return a checksum or digest suitable for more reproducible supply-chain references.
Project history
Frizbee is maintained in the `stacklok/frizbee` GitHub repository and is written in Go. Official release metadata gathered during research showed a young 0.x project, with v0.0.x and v0.1.x releases from 2024 onward and v0.1.10 published in 2026.
Adoption history
The README documents installation through Go, Homebrew, and winget, and presents Frizbee as both a CLI and a library. It also points to a Frizbee GitHub Action, placing the project in the GitHub Actions and container-image hardening workflow rather than general-purpose checksum utilities.
How it is used
For GitHub Actions, users can point `frizbee actions` at workflow files or a single action reference to generate replacements and optionally run in dry-run or CI-failing modes. For container images, users can point `frizbee image` at YAML, Dockerfile paths, or a single image tag to get a digest-pinned reference.
The library API exposes replacers for GitHub Actions and container images, with functions for parsing strings, paths, files, and filesystem abstractions.
Why package nerds care
Frizbee is package-nerd significant as a small supply-chain utility focused on a common packaging and CI problem: tags are convenient but mutable, while checksums and digests are auditable. It sits near Dependabot-style maintenance, GitHub Actions pinning, container digest pinning, and policy enforcement in CI.
Its value as a packaged CLI is that it can be dropped into local workflows or CI jobs without a larger platform, while the library form lets other tools reuse the tag-to-checksum logic.
Timeline
- 2024: Official releases include early v0.0.x and v0.1.x Frizbee builds.
- 2024: The README documents installation via Go, Homebrew, and winget and usage for GitHub Actions and container images.
- 2026: Official releases include Frizbee v0.1.10.
Related projects
- Related surfaces include GitHub Actions, the Frizbee GitHub Action, container registries, image digest pinning, and Stacklok supply-chain tooling.
- The CLI's work overlaps with CI policy, tag pinning, reproducible builds, and tools that rewrite workflow or manifest files to less mutable references.
Sources
security posture
Risk level: green
narrow executable package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- narrow executable package without higher-risk signals
Signals
- metadata:no-higher-risk-signals
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
frizbee | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version0.1.10
manager updated2026-07-26
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:frizbee |
|---|---|
| Version | 0.1.10 |
| Package manager | Homebrew |
| Homepage | https://github.com/stacklok/frizbee |
| Repository | https://github.com/stacklok/frizbee |
| Last updated | 2026-07-26T11:37:58+02:00 |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
zypper95%
frizbee 0.1.10-1.5
Throw a tag at and it comes back with a checksum
https://github.com/stacklok/frizbee
sudo zypper install frizbee- License: Apache-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: frizbee
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Frizbee
zypper95%
frizbee-bash-completion 0.1.10-1.5
Bash Completion for frizbee
https://github.com/stacklok/frizbee
sudo zypper install frizbee-bash-completion- License: Apache-2.0
- Category: System/Shells
- Architecture: noarch
- Source Package: frizbee
- 2 dependencies
- 1 provides
- normalized package name match
- Matched by: Frizbee
zypper95%
frizbee-fish-completion 0.1.10-1.5
Fish Completion for frizbee
https://github.com/stacklok/frizbee
sudo zypper install frizbee-fish-completion- License: Apache-2.0
- Category: System/Shells
- Architecture: noarch
- Source Package: frizbee
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Frizbee
zypper95%
frizbee-zsh-completion 0.1.10-1.5
Zsh Completion for frizbee
https://github.com/stacklok/frizbee
sudo zypper install frizbee-zsh-completion- License: Apache-2.0
- Category: System/Shells
- Architecture: noarch
- Source Package: frizbee
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Frizbee
winget95%
stacklok.frizbee
winget install --id stacklok.frizbee -e- normalized package name match
- Matched by: Frizbee
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- pkg.so package database
- pkgdb category and tag curation