# 使用 Homebrew, Nix 安装 cfripper 查看 cfripper 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。 ## 安装 ```sh sudo av install brew:cfripper ``` 其他安装命令: ### macOS - Homebrew (100%): ```sh brew install cfripper ``` 证据: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#cfripper ``` 证据: nixpkgs package indexes: pkgs/by-name/cf/cfripper/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## 软件包事实 - **软件包键:** brew:cfripper - **软件包管理器:** Homebrew - **软件包管理器页面:** - **版本:** 1.21.0 - **来源摘要:** Library and CLI tool to analyse CloudFormation templates for security issues - **主页:** - **上游文档:** - **许可证:** Apache-2.0 - **源码归档:** - **最后更新:** 2026-07-01T15:27:38Z - **已生成:** 2026-08-04T22:13:35+00:00 ## 可执行文件 - cfripper (cli) - cfripper (别名) ## 依赖 - libyaml - pydantic - python@3.14 ## 安装行为 - post-install 钩子: 未定义 - Bottle: 可用 于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## 版本和新鲜度 - 页面生成时间: 2026-08-04 - 管理器版本: 1.21.0 - 管理器更新时间: 2026-07-01 - 本地数据: OK - 上游仓库: https://cfripper.readthedocs.io - 信息: Release/tag comparison is only available for GitHub repositories. ## 项目历史与用法 CFRipper is a Skyscanner library and CLI for analyzing AWS CloudFormation templates for security and compliance issues. The official README describes it as a way to prevent deploying insecure AWS resources and to add custom compliance plugins. ### 项目历史 The official GitHub repository was created in July 2018. Its documentation presents CFRipper as both a library and command-line analyzer, with examples for scanning CloudFormation YAML or JSON templates, resolving references, emitting text or JSON output, and loading custom rule configuration. The project sits in the CloudFormation security-analysis niche rather than the general linting niche: its examples focus on wildcard principals, overprivileged IAM roles, monitored issues, and compliance rule customization. ### 采用历史 Official documentation is published on Read the Docs, the README advertises PyPI and Homebrew badges, and the package metadata in this batch shows Homebrew and Nix packaging. CFRipper's adoption is tied to security review workflows for CloudFormation templates: it is useful before deployment, in CI, or as a library embedded in custom cloud-governance checks. ### 使用方式 The README documents running `cfripper` against one or more CloudFormation templates, choosing `txt` or `json` output, using `--resolve`, writing results with `--output-folder`, and passing custom rules config or rules filter folders. The official docs show rules config files as command inputs rather than a fixed application config location, so `config-file-location` remains null. No official credential file location is documented for the CLI. ### 为什么软件包爱好者会关心 CFRipper is notable because it packages cloud-security review into an ordinary CLI: a repository can add it to pre-deploy checks without first building an internal CloudFormation parser and IAM rule engine. It also shows the common packaging path for Python security tools: library plus CLI, PyPI first, then Homebrew or Nix for operators who want a standalone command. ### 时间线 - 2018: The Skyscanner/cfripper repository is created on GitHub. - 2018: The project documents CloudFormation security analysis and custom compliance plugins. - 2026: The repository and Read the Docs site remain the official documentation surfaces. ### Related projects - AWS CloudFormation templates are the artifacts CFRipper analyzes. - IAM policy and principal rules are central to the README examples. - cfn-lint is an adjacent CloudFormation validation tool, while CFRipper focuses on security and compliance rules. ### 来源 - - - - - ## 安全说明 infrastructure mutation or orchestration signal. - **Geiger 风险:** orange / 中 - infrastructure mutation or orchestration signal ## 源数据库详情 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** cfripper - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## 其他软件包管理器记录 - Nix - cfripper: normalized package name match | nixpkgs package indexes: pkgs/by-name/cf/cfripper/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## 相关链接 - [Cloud CLI packages](https://pkg.so/zh-hans/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Secret-risk packages](https://pkg.so/zh-hans/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://pkg.so/zh-hans/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Developer build packages](https://pkg.so/zh-hans/developer-build-tools/) - Matched build, compiler, generator, or developer workflow metadata. - [python@3.14](https://pkg.so/zh-hans/brew/python-3-14/) - Runtime dependency declared by Homebrew. - [parliament](https://pkg.so/zh-hans/brew/parliament/) - Shares pkgdb curated category or tags: aws, cli, cloud-security, security. - [cloudfox](https://pkg.so/zh-hans/brew/cloudfox/) - Shares pkgdb curated category or tags: aws, cli, cloud-security, security. - [lacework-cli](https://pkg.so/zh-hans/brew/lacework-cli/) - Shares pkgdb curated category or tags: cli, cloud-security, security. - [s3scanner](https://pkg.so/zh-hans/brew/s3scanner/) - Shares pkgdb curated category or tags: cli, cloud-security, security. - [legitify](https://pkg.so/zh-hans/brew/legitify/) - Shares pkgdb curated category or tags: cli, cloud-security, security. - [principalmapper](https://pkg.so/zh-hans/brew/principalmapper/) - Shares pkgdb curated category or tags: aws, cli, cloud-security, security. - [cliam](https://pkg.so/zh-hans/brew/cliam/) - Shares pkgdb curated category or tags: aws, cli, cloud-security, security. - [zizmor](https://pkg.so/zh-hans/brew/zizmor/) - Shares pkgdb curated category or tags: cli, security, static-analysis. - [checkov](https://pkg.so/zh-hans/brew/checkov/) - Both packages touch the same language runtime or ecosystem. Shared terms: analysis, cli, cloud, libyaml, pydantic. ## Combined YAML source View the package source record on GitHub. [combined/cfripper.yml](https://github.com/mxcl/pkgdb/blob/main/combined/cfripper.yml) ## 来源 - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph