# 使用 Homebrew 安装 gotpm

查看 gotpm 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:gotpm
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install gotpm
```

  证据: local Homebrew formula metadata

## 软件包事实

- **软件包键:** brew:gotpm
- **软件包管理器:** Homebrew
- **版本:** 0.4.9
- **来源摘要:** CLI for using TPM 2.0
- **主页:** <https://github.com/google/go-tpm-tools>
- **仓库:** <https://github.com/google/go-tpm-tools>
- **最后更新:** 2026-07-25T20:55:27-04:00
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- gotpm (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 0.4.9
## 项目历史与用法

gotpm is the command-line companion in Google's go-tpm-tools repository, a TPM 2.0 support module built to sit above google/go-tpm. The repository packages higher-level client, server, protobuf, simulator, and CLI pieces for Go programs that need TPM signing, attestation, PCR reads, sealing, event-log handling, or related workflows.

### 项目历史

go-tpm-tools dates to Google's 2018 TPM 2.0 work and explicitly narrows its scope to TPM 2.0 rather than TPM 1.2. The README frames the library as a complement to Go-TPM: Go-TPM supplies lower-level TPM access, while go-tpm-tools adds simplified APIs and workflows around attestation, signing, import, event logs, and server-side verification. gotpm is exposed from the same repository as the user-facing CLI for exercising TPM operations without writing Go code.

### 采用历史

The package-manager footprint is modest compared with broader security scanners, but the Homebrew formula and the repository's documented `go install github.com/google/go-tpm-tools/cmd/gotpm@latest` path made gotpm available to developers who wanted a Go-native TPM utility. Adoption is tied to hardware-backed security, confidential-computing, and attestation users rather than general-purpose shell workflows.

### 使用方式

gotpm is installed either with `go install` from the repository or by building the `cmd/gotpm` directory from a clone. The README directs users to `gotpm --help` and per-command help, while the surrounding packages document TPM 2.0 operations such as signing, attestation, PCR reads, sealing and unsealing, NV data reads, and TCG event-log handling.

### 为什么软件包爱好者会关心

For package maintainers, gotpm is a small but useful example of a hardware-facing Go CLI where distribution quality depends on CGO/OpenSSL simulator edges, Go toolchain support, and whether the host actually has TPM 2.0 access. It also sits in the package ecosystem around google/go-tpm, which matters for people tracking Go security tooling and reproducible attestation utilities.

### 时间线

- 2018: Google copyright and repository metadata place go-tpm-tools in Google's TPM 2.0 support work.
- 2020: v0.2.1 release notes described signer improvements.
- 2021: v0.3.0 release notes emphasized attestation generation and verification.
- 2021: v0.3.0 prereleases previewed the larger attestation-oriented update series.

### Related projects

- google/go-tpm provides the lower-level TPM library that go-tpm-tools complements.
- Microsoft's TPM 2.0 simulator is used through the go-tpm-tools simulator bindings.
- Trusted Computing Group TPM 2.0 specifications define the hardware/security domain that the tool targets.

### 来源

- <https://api.github.com/repos/google/go-tpm-tools>
- <https://github.com/google/go-tpm-tools/releases>
- <https://raw.githubusercontent.com/google/go-tpm-tools/master/README.md>


## 安全说明

narrow executable package without higher-risk signals.

- **Geiger 风险:** 绿色 / 低
- narrow executable package without higher-risk signals


## Combined YAML source

View the package source record on GitHub. [combined/gotpm.yml](https://github.com/mxcl/pkgdb/blob/main/combined/gotpm.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph