macOS
Homebrewverified · 100%
brew install vshprovider-native install command
brew / rank 7406
Install vsh with Homebrew
HashiCorp Vault interactive shell. Version 1.0.0 via Homebrew; verified 2026-07-26.
install
Additional install commands
overview
Package summary
HashiCorp Vault interactive shell
Project links
Commands and aliases
- vsh
history
Project history and usage
vsh is an interactive shell and CLI for HashiCorp Vault. Its project identity is to make Vault secret paths feel like directories and files, with familiar commands such as `ls`, `cd`, `cat`, `cp`, `mv`, `rm`, `grep`, and `replace`.
Project history
The project is maintained on GitHub by fishi0x01. Its README emphasizes transparency between KV version 1 and KV version 2 secret engines, recursive operations over Vault paths, non-interactive command execution for automation, and command documentation under `doc/commands`.
The 1.0.0 release, published on GitHub in 2026, marks a maturation point: the release notes added concurrent recursive operations, a richer Bubble Tea-based interactive UI, safer recursive removal prompts, and static release binaries.
How it is used
vsh is used by operators and developers who work directly with Vault key-value secrets and want a shell-like navigation model rather than repeated raw `vault kv` commands. It uses Vault token helper behavior, supports common token environment variables, and documents permission needs such as List access for completion and path discovery.
Why package nerds care
vsh is niche but useful in the CLI ecosystem because it wraps a security service in traditional Unix shell verbs. That makes it attractive to users who think in paths, recursive copy/move/remove operations, and grep-like inspection of secret trees.
Timeline
- 2026: vsh 1.0.0 was released with concurrent recursive operations and a Bubble Tea-based interactive interface.
Sources
- Command docs directory: https://github.com/fishi0x01/vsh/tree/master/doc/commands
- GitHub README: https://github.com/fishi0x01/vsh
- GitHub releases: https://github.com/fishi0x01/vsh/releases
security posture
Risk level: yellow
generalized runtime or code generation signal.
Risk classifier
yellow risk · medium confidence · runtime
Why
- generalized runtime or code generation signal
Signals
- text:shell
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
vsh | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version1.0.0
manager updated2026-07-26
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:vsh |
|---|---|
| Version | 1.0.0 |
| Package manager | Homebrew |
| Homepage | https://github.com/fishi0x01/vsh |
| Repository | https://github.com/fishi0x01/vsh |
| Last updated | 2026-07-26T00:30:34+02:00 |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- curated package history
- pkgdb category and tag curation