pkg.soopen package index

security

Cloud CLI packages

Cloud CLIs often hold access to accounts, deploys, registries, state, and production infrastructure from a local shell.

summary

Why this package group is here

Cloud CLI packages currently includes 751 package catalog entries. 0 have protected-tool coverage, 2 have approval-gate metadata, and 290 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.

Generated source

This hub uses the same local package data as individual package pages: pkg.so package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.

Review model

Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.

High-signal tools

awscli8 approval-gate rules are present.docker6 approval-gate rules are present.crungeneralized runtime or code generation signalgitlab-ci-localgeneralized runtime or code generation signalapache-sparkbroad file, network, media, or database tool signaldocker-agentgeneralized runtime or code generation signalaws-shellgeneralized runtime or code generation signalgimmegeneralized runtime or code generation signallitanigeneralized runtime or code generation signalshellzgeneralized runtime or code generation signalbubblewrapnarrow executable package without higher-risk signalsglabOpen-source GitLab command-line tool

Approval-gated tools

awscli8 approval-gate rules are present.docker6 approval-gate rules are present.

Related hubs

Terminal utility packagesCommand-line utilities with local package pages, executable metadata, and Automic Vault security notes.709Homebrew utility packagesHomebrew packages with local package pages that need at least one crawlable package-graph path.598Networking and protocol packagesNetwork clients, protocol utilities, download tools, and remote-service helpers.324Source-control packagesSource-control packages can read or mutate repositories, issue trackers, release flows, and authenticated developer state.316Secret-risk packagesPackages with protected-tool coverage, approval-gate metadata, or non-low Geiger findings deserve explicit review before agents run them.295Web development packagesWeb servers, frontend build tools, JavaScript packages, CSS tools, and browser-adjacent utilities.247Developer build packagesBuild systems, compilers, generators, and developer tools that influence local source trees and artifacts.213Text processing packagesPackages used to inspect, transform, search, render, or generate text and structured documents.197

Representative package spokes

awscli8 approval-gate rules are present.is-dockerCheck if the process is running inside a Docker containeris-inside-containerCheck if the process is running inside a container (Docker/Podman)miniflareFun, full-featured, fully-local simulator for Cloudflare Workersdocker6 approval-gate rules are present.workerd👷 workerd, Cloudflare's JavaScript/Wasm Runtimekubernetes-clicluster orchestration infrastructurehelmKubernetes package managerbubblewrapnarrow executable package without higher-risk signalsglabOpen-source GitLab command-line toolazure-clicloud infrastructure mutation tooldocker-composeIsolated development environments using Dockercloudflaredformula declares a Homebrew serviceexpo-updatesFetches and manages remotely-hosted assets and updates to your app's JS bundle.ansibleAutomate deployment, configuration, and upgradingkubeconforminfrastructure mutation or orchestration signal

packages

Indexed package pages

PackageManagerSignalsWhy it appears here
awscliHomebrewapproval gate, v2.39.38 approval-gate rules are present.
dockerHomebrewapproval gate, orange risk, v29.9.26 approval-gate rules are present.
crunHomebrewyellow risk, v1.30.1generalized runtime or code generation signal
gitlab-ci-localHomebrewyellow risk, v4.77.0generalized runtime or code generation signal
apache-sparkHomebrewyellow risk, v4.3.0broad file, network, media, or database tool signal
docker-agentHomebrewyellow risk, v1.156.2generalized runtime or code generation signal
aws-shellHomebrewyellow risk, v0.2.2generalized runtime or code generation signal
gimmeHomebrewyellow risk, v1.5.6generalized runtime or code generation signal
litaniHomebrewyellow risk, v1.29.0generalized runtime or code generation signal
shellzHomebrewyellow risk, v1.6.0generalized runtime or code generation signal
bubblewrapHomebrewgreen risk, v0.13.1narrow executable package without higher-risk signals
glabHomebrewv1.127.0no executable entrypoint in the package index
docker-composeHomebrewv5.7.0no executable entrypoint in the package index
ansibleHomebrewv14.5.0no executable entrypoint in the package index
flyctlHomebrewv0.5.2no executable entrypoint in the package index
terragruntHomebrewv1.2.1no executable entrypoint in the package index
orasHomebrewgreen risk, v1.3.6narrow executable package without higher-risk signals
k3dHomebrewgreen risk, v5.9.0narrow executable package without higher-risk signals
docker-buildxHomebrewv0.38.1no executable entrypoint in the package index
azcopyHomebrewv10.34.1no executable entrypoint in the package index
aws-sam-cliHomebrewv1.171.0no executable entrypoint in the package index
jfrog-cliHomebrewgreen risk, v2.130.0narrow executable package without higher-risk signals
terraform-docsHomebrewv0.24.0no executable entrypoint in the package index
railwayHomebrewv5.71.0no executable entrypoint in the package index
actHomebrewgreen risk, v0.2.95narrow executable package without higher-risk signals
firebase-cliHomebrewv15.34.2no executable entrypoint in the package index
kubectxHomebrewgreen risk, v0.11.0narrow executable package without higher-risk signals
openshift-cliHomebrewv4.22.18no executable entrypoint in the package index
aws-vaultHomebrewv7.17.5no executable entrypoint in the package index
lazydockerHomebrewgreen risk, v0.25.2narrow executable package without higher-risk signals
doctlHomebrewv2.1.0no executable entrypoint in the package index
mongodb-atlas-cliHomebrewgreen risk, v1.59.4narrow executable package without higher-risk signals
docker-credential-helperHomebrewv0.9.12no executable entrypoint in the package index
podman-composeHomebrewgreen risk, v1.6.0narrow executable package without higher-risk signals
docker-credential-helper-ecrHomebrewgreen risk, v0.12.0narrow executable package without higher-risk signals
fuse-overlayfsHomebrewgreen risk, v1.18narrow executable package without higher-risk signals
craneHomebrewv0.22.1no executable entrypoint in the package index
tfsecHomebrewgreen risk, v1.28.14narrow executable package without higher-risk signals
istioctlHomebrewv1.31.3no executable entrypoint in the package index
kubeloginHomebrewgreen risk, v1.36.4narrow executable package without higher-risk signals
snowflake-cliHomebrewv3.31.0no executable entrypoint in the package index
herokuHomebrewv11.12.1no executable entrypoint in the package index
cdk8sHomebrewv2.207.75no executable entrypoint in the package index
logcliHomebrewv3.7.9no executable entrypoint in the package index
renderHomebrewv2.35.0no executable entrypoint in the package index
netlify-cliHomebrewv27.16.1no executable entrypoint in the package index
akamaiHomebrewgreen risk, v2.0.6narrow executable package without higher-risk signals
saml2awsHomebrewgreen risk, v2.36.19narrow executable package without higher-risk signals
ramalamaHomebrewv0.25.0no executable entrypoint in the package index
s3cmdHomebrewgreen risk, v2.4.0narrow executable package without higher-risk signals
buildkitHomebrewv0.34.1no executable entrypoint in the package index
awscurlHomebrewv0.44no executable entrypoint in the package index
kubecolorHomebrewgreen risk, v0.8.0narrow executable package without higher-risk signals
tfmigrateHomebrewgreen risk, v0.4.6narrow executable package without higher-risk signals
podman-tuiHomebrewgreen risk, v2.0.0narrow executable package without higher-risk signals
cmctlHomebrewgreen risk, v2.6.2narrow executable package without higher-risk signals
openstackclientHomebrewv10.5.0no executable entrypoint in the package index
aws-elasticbeanstalkHomebrewv3.27.5no executable entrypoint in the package index
daggerHomebrewgreen risk, v0.21.11narrow executable package without higher-risk signals
scwHomebrewv2.65.2no executable entrypoint in the package index
awscli-localHomebrewv0.23.0no executable entrypoint in the package index
gimme-aws-credsHomebrewv2.8.2no executable entrypoint in the package index
aws-nukeHomebrewv3.68.3no executable entrypoint in the package index
runmeHomebrewgreen risk, v3.17.6narrow executable package without higher-risk signals
okta-aws-cliHomebrewgreen risk, v2.6.0narrow executable package without higher-risk signals
apkoHomebrewv1.4.15no executable entrypoint in the package index
azure-devHomebrewv1.37.2no executable entrypoint in the package index
kubieHomebrewgreen risk, v0.28.0narrow executable package without higher-risk signals
ethereumHomebrewv1.17.10no executable entrypoint in the package index
kicsHomebrewgreen risk, v2.2.0narrow executable package without higher-risk signals
aws-sso-cliHomebrewv2.3.4no executable entrypoint in the package index
tf-summarizeHomebrewgreen risk, v0.3.20narrow executable package without higher-risk signals