Generated source
This hub uses the same local package data as individual package pages: Nucleus package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.
security
Cloud CLI packages
Cloud CLIs often hold access to accounts, deploys, registries, state, and production infrastructure from a local shell.
summary
Why this package group is here
Cloud CLI packages currently includes 583 package catalog entries. 0 have protected-tool coverage, 2 have approval-gate metadata, and 289 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.
Review model
Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.
High-signal tools
awscli8 approval-gate rules are present.docker6 approval-gate rules are present.crungeneralized runtime or code generation signalapache-sparkbroad file, network, media, or database tool signalgitlab-ci-localgeneralized runtime or code generation signalaws-shellgeneralized runtime or code generation signaldocker-agentgeneralized runtime or code generation signalgimmegeneralized runtime or code generation signalshellzgeneralized runtime or code generation signalbubblewrapnarrow executable package without higher-risk signalsdocker-composeIsolated development environments using DockerglabOpen-source GitLab command-line tool
Approval-gated tools
Related hubs
Representative package spokes
awscli8 approval-gate rules are present.docker6 approval-gate rules are present.kubernetes-clicluster orchestration infrastructurehelmKubernetes package managerbubblewrapnarrow executable package without higher-risk signalsazure-clicloud infrastructure mutation tooldocker-composeIsolated development environments using DockerglabOpen-source GitLab command-line toolcloudflaredformula declares a Homebrew servicepodmancontainer infrastructureansibleAutomate deployment, configuration, and upgradingcolimacontainer and virtual machine infrastructurek9sinfrastructure mutation or orchestration signalkubeconforminfrastructure mutation or orchestration signalterragruntThin wrapper for Terraform e.g. for locking stateflyctlCommand-line tools for fly.io services
packages
Indexed package pages
| Package | Manager | Signals | Why it appears here |
|---|---|---|---|
| awscli | Homebrew | approval gate, v2.36.14 | 8 approval-gate rules are present. |
| docker | Homebrew | approval gate, orange risk, v29.7.1 | 6 approval-gate rules are present. |
| crun | Homebrew | yellow risk, v1.28 | generalized runtime or code generation signal |
| apache-spark | Homebrew | yellow risk, v4.2.0 | broad file, network, media, or database tool signal |
| gitlab-ci-local | Homebrew | yellow risk, v4.74.0 | generalized runtime or code generation signal |
| aws-shell | Homebrew | yellow risk, v0.2.2 | generalized runtime or code generation signal |
| docker-agent | Homebrew | yellow risk, v1.119.0 | generalized runtime or code generation signal |
| gimme | Homebrew | yellow risk, v1.5.6 | generalized runtime or code generation signal |
| shellz | Homebrew | yellow risk, v1.6.0 | generalized runtime or code generation signal |
| bubblewrap | Homebrew | green risk, v0.11.2 | narrow executable package without higher-risk signals |
| docker-compose | Homebrew | v5.3.1 | no executable entrypoint in the package index |
| glab | Homebrew | v1.111.0 | no executable entrypoint in the package index |
| ansible | Homebrew | v14.2.0 | no executable entrypoint in the package index |
| terragrunt | Homebrew | v1.1.2 | no executable entrypoint in the package index |
| flyctl | Homebrew | v0.4.77 | no executable entrypoint in the package index |
| k3d | Homebrew | green risk, v5.9.0 | narrow executable package without higher-risk signals |
| oras | Homebrew | green risk, v1.3.3 | narrow executable package without higher-risk signals |
| docker-buildx | Homebrew | v0.36.0 | no executable entrypoint in the package index |
| aws-sam-cli | Homebrew | v1.165.0 | no executable entrypoint in the package index |
| jfrog-cli | Homebrew | green risk, v2.117.0 | narrow executable package without higher-risk signals |
| terraform-docs | Homebrew | v0.24.0 | no executable entrypoint in the package index |
| act | Homebrew | green risk, v0.2.89 | narrow executable package without higher-risk signals |
| azcopy | Homebrew | v10.32.6 | no executable entrypoint in the package index |
| firebase-cli | Homebrew | v15.25.1 | no executable entrypoint in the package index |
| mongodb-atlas-cli | Homebrew | green risk, v1.57.0 | narrow executable package without higher-risk signals |
| kubectx | Homebrew | green risk, v0.11.0 | narrow executable package without higher-risk signals |
| openshift-cli | Homebrew | v4.22.6 | no executable entrypoint in the package index |
| railway | Homebrew | v5.30.3 | no executable entrypoint in the package index |
| aws-vault | Homebrew | v7.13.2 | no executable entrypoint in the package index |
| lazydocker | Homebrew | green risk, v0.25.2 | narrow executable package without higher-risk signals |
| doctl | Homebrew | v1.166.0 | no executable entrypoint in the package index |
| podman-compose | Homebrew | green risk, v1.6.0 | narrow executable package without higher-risk signals |
| docker-credential-helper-ecr | Homebrew | green risk, v0.12.0 | narrow executable package without higher-risk signals |
| docker-credential-helper | Homebrew | v0.9.8 | no executable entrypoint in the package index |
| fuse-overlayfs | Homebrew | green risk, v1.17 | narrow executable package without higher-risk signals |
| tfsec | Homebrew | green risk, v1.28.14 | narrow executable package without higher-risk signals |
| istioctl | Homebrew | v1.30.3 | no executable entrypoint in the package index |
| crane | Homebrew | v0.21.8 | no executable entrypoint in the package index |
| kubelogin | Homebrew | green risk, v1.36.3 | narrow executable package without higher-risk signals |
| cdk8s | Homebrew | v2.207.43 | no executable entrypoint in the package index |
| heroku | Homebrew | v11.8.1 | no executable entrypoint in the package index |
| logcli | Homebrew | v3.7.4 | no executable entrypoint in the package index |
| snowflake-cli | Homebrew | v3.23.0 | no executable entrypoint in the package index |
| render | Homebrew | v2.22.0 | no executable entrypoint in the package index |
| saml2aws | Homebrew | green risk, v2.36.19 | narrow executable package without higher-risk signals |
| ramalama | Homebrew | v0.23.0 | no executable entrypoint in the package index |
| netlify-cli | Homebrew | v27.0.1 | no executable entrypoint in the package index |
| akamai | Homebrew | green risk, v2.0.5 | narrow executable package without higher-risk signals |
| dagger | Homebrew | green risk, v0.21.8 | narrow executable package without higher-risk signals |
| buildkit | Homebrew | v0.32.0 | no executable entrypoint in the package index |
| aws-elasticbeanstalk | Homebrew | v3.27.3 | no executable entrypoint in the package index |
| awscli-local | Homebrew | v0.22.2 | no executable entrypoint in the package index |
| aws-nuke | Homebrew | v3.66.0 | no executable entrypoint in the package index |
| s3cmd | Homebrew | green risk, v2.4.0 | narrow executable package without higher-risk signals |
| kubecolor | Homebrew | green risk, v0.6.0 | narrow executable package without higher-risk signals |
| cmctl | Homebrew | green risk, v2.5.0 | narrow executable package without higher-risk signals |
| podman-tui | Homebrew | green risk, v1.11.3 | narrow executable package without higher-risk signals |
| awscurl | Homebrew | v0.44 | no executable entrypoint in the package index |
| openstackclient | Homebrew | v10.2.1 | no executable entrypoint in the package index |
| runme | Homebrew | green risk, v3.17.2 | narrow executable package without higher-risk signals |
| gimme-aws-creds | Homebrew | v2.8.2 | no executable entrypoint in the package index |
| okta-aws-cli | Homebrew | green risk, v2.6.0 | narrow executable package without higher-risk signals |
| scw | Homebrew | v2.60.0 | no executable entrypoint in the package index |
| ethereum | Homebrew | v1.17.5 | no executable entrypoint in the package index |
| tfmigrate | Homebrew | green risk, v0.4.5 | narrow executable package without higher-risk signals |
| apko | Homebrew | v1.2.30 | no executable entrypoint in the package index |
| tf-summarize | Homebrew | green risk, v0.3.20 | narrow executable package without higher-risk signals |
| kubie | Homebrew | green risk, v0.28.0 | narrow executable package without higher-risk signals |
| aws-sso-cli | Homebrew | v2.3.2 | no executable entrypoint in the package index |
| kics | Homebrew | green risk, v2.1.21 | narrow executable package without higher-risk signals |
| aws-sso-util | Homebrew | v4.33.0 | no executable entrypoint in the package index |
| kops | Homebrew | green risk, v1.36.1 | narrow executable package without higher-risk signals |