macOS
brew install go-camolocal Homebrew formula metadata
brew / rank 7295
Secure image proxy server. Version 2.7.5 via Homebrew; verified 2026-07-29. Also installable with nix: nix profile install nixpkgs#go-camo.
install
brew install go-camolocal Homebrew formula metadata
nix profile install nixpkgs#go-camonixpkgs package indexes · pkgs/by-name/go/go-camo/package.nix · source: api.github.com
overview
Secure image proxy server
history
go-camo is a secure image proxy server written in Go. It implements the camo pattern: a web application rewrites remote image URLs into signed proxy URLs, and the proxy fetches and serves those images over TLS to avoid mixed-content warnings.
The project was announced to the Go community in July 2012 as a Go version of GitHub's Camo server. Its README keeps that lineage explicit by describing go-camo as a Go version of a camo server and by comparing it with the original atmos/camo project.
go-camo fit an operational niche for sites that hosted HTTPS pages while allowing user-supplied image URLs. Its significance came less from broad framework adoption and more from giving operators a static Go binary, native TLS and HTTP/2 support, HMAC URL validation, and deployment guidance for process supervisors, Heroku, containers, and CDN-fronted installations.
Practitioners deploy go-camo beside a web application. The application signs the original image URL with an HMAC key and emits a go-camo URL; go-camo validates the signature, decodes the target URL, fetches the remote image, and streams it back. The README also documents operational controls such as `GOCAMO_HMAC`, HTTP proxy variables, private-address rejection for SSRF-style risk reduction, allow/deny filters, and supervisor-based production operation.
For package maintainers, go-camo is the kind of small network daemon that benefits from binary distribution: a single executable plus man pages and service-manager examples. Its packaging in Homebrew and Nix makes the image-proxy pattern installable without a Node or Ruby runtime.
security posture
broad file, network, media, or database tool signal.
blue risk · medium confidence · tool
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
go-camo | executable | indexed executable | Discovered from the local executable index. |
url-tool | executable | indexed executable | Discovered from the local executable index. |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
install metadata
| Package key | brew:go-camo |
|---|---|
| Version | 2.7.5 |
| Package manager | Homebrew |
| Homepage | https://github.com/cactus/go-camo |
| Repository | https://github.com/cactus/go-camo |
| Last updated | 2026-07-29T16:05:03+02:00 |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source database matches
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
go-camo
nix profile install nixpkgs#go-camosource trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.