macOS
Homebrewverified · 100%
brew install yataslocal Homebrew formula metadata
brew / rank 10165
Install yatas with Homebrew, Nix
Tool to audit AWS/GCP infrastructure for misconfiguration or security issues. Version 1.6.1 via Homebrew; verified 2026-07-25. Also installable with nix: nix profile install nixpkgs#yatas.
install
Additional install commands
Linux
Nixverified · 92%
nix profile install nixpkgs#yatasnixpkgs package indexes · pkgs/by-name/ya/yatas/package.nix · source: api.github.com
overview
Package summary
Tool to audit AWS/GCP infrastructure for misconfiguration or security issues
Project links
Commands and aliases
- yatas
history
Project history and usage
YATAS, Yet Another Testing & Auditing Solution, is a Padok Team CLI for checking AWS and GCP infrastructure for misconfiguration and security issues. The public history is mostly repository-level, but enough is documented to place it in the 2022 wave of lightweight DevSecOps audit tools.
Project history
The GitHub repository was created in August 2022. Its README frames the tool as a practical auditor rather than a complete benchmark suite: it checks the practices Padok considered important from experience, then lets users install plugins and configure checks through .yatas.yml.
The changelog shows rapid early iteration through 2022, including dynamic plugin calling, plugin result interfaces, category initialization, and a 1.0.0 release in September 2022. A larger 2023 refactor removed AWS-only assumptions, added documentation and config validation, and updated the project for broader cloud-audit use.
Adoption history
YATAS appears to have remained a focused DevSecOps tool rather than a broad industry standard. Its GitHub topics, README, and plugin repositories position it for AWS/GCP hardening, account assessment, CI use, and infrastructure review by teams that want a small CLI rather than a hosted posture-management product.
How it is used
The normal flow is to initialize a .yatas.yml file, edit it for the desired checks, install selected plugins, and run the yatas command locally or in CI. The README documents flags for showing details, comparing with a previous run, returning a CI failure code when issues are found, summarizing results, and timing checks.
Why package nerds care
YATAS is a useful package-index entry because it packages cloud security review as a single developer CLI with plugins. Its significance is not raw popularity; it is the shape of the tool: cloud posture checks that can live beside infrastructure code, run in pipelines, and be installed with ordinary package managers.
Timeline
- 2022-08-05: The padok-team/yatas GitHub repository is created.
- 2022-09: The changelog records plugin-system work and the 1.0.0 release.
- 2023-04: The changelog records documentation, config validation, and removal of AWS-only references.
- 2025-12: The changelog records the 1.6.x line with an added HDS CLI option.
Related projects
- padok-team/yatas-aws provides AWS checks for the YATAS plugin model.
- padok-team/yatas-gcp provides GCP checks for the same auditing workflow.
Sources
security posture
Risk level: orange
infrastructure mutation or orchestration signal.
Risk classifier
orange risk · medium confidence · infrastructure
Why
- infrastructure mutation or orchestration signal
Signals
- text:infrastructure
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
.yatas.yml
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
yatas | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version1.6.1
manager updated2026-07-25
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:yatas |
|---|---|
| Version | 1.6.1 |
| Package manager | Homebrew |
| Homepage | https://github.com/padok-team/yatas |
| Repository | https://github.com/padok-team/yatas |
| Last updated | 2026-07-25T21:32:48+02:00 |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Nix95%
yatas
nix profile install nixpkgs#yatas- normalized package name match
- Matched by: Yatas
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- pkg.so package database
- pkgdb category and tag curation