# 使用 Homebrew, Nix 安装 kingfisher
查看 kingfisher 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。
## 安装
```sh
sudo av install brew:kingfisher
```
其他安装命令:
### macOS
- Homebrew (100%):
```sh
brew install kingfisher
```
证据: local Homebrew formula metadata
### Linux
- Nix (92%):
```sh
nix profile install nixpkgs#kingfisher
```
证据: nixpkgs package indexes: pkgs/by-name/ki/kingfisher/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
## 软件包事实
- **软件包键:** brew:kingfisher
- **软件包管理器:** Homebrew
- **版本:** 1.110.0
- **来源摘要:** MongoDB's blazingly fast secret scanning and validation tool
- **主页:**
- **仓库:**
- **最后更新:** 2026-08-01T02:57:28Z
- **已生成:** 2026-08-03T19:37:03+00:00
## 可执行文件
- kingfisher (别名)
## 安装行为
- Bottle: 不可用
## 版本和新鲜度
- 页面生成时间: 2026-08-03
- 管理器版本: 1.110.0
## 项目历史与用法
Kingfisher is MongoDB's open source secret scanning and live validation tool, written in Rust for high-throughput scans of repositories, files, archives, cloud storage, collaboration systems, and CI workflows.
### 项目历史
MongoDB presented Kingfisher publicly in June 2025 after describing it as a project that began as an internal effort to detect and verify exposed credentials. The project couples fast pattern matching with validation checks so security teams can distinguish inactive-looking findings from active credentials that require urgent rotation or revocation.
The repository history and release stream show a fast-moving post-release project. GitHub releases list Kingfisher v1.12.0, v1.13.0, and v1.14.0 on June 25-26, 2025, and v1.103.0 through v1.105.0 during June 16-29, 2026.
### 采用历史
MongoDB's announcement framed Kingfisher as a core part of MongoDB's internal security workflows before its public release. Homebrew packaging made the CLI installable for macOS and Linux users through the same channel many security engineers use for scanners and developer tools.
### 使用方式
Kingfisher is used to scan source trees, Git history, platform integrations, archives, and storage targets for leaked API keys, tokens, and credentials. Its CLI can emit JSON, SARIF, TOON, and HTML reports, validate supported secrets against provider APIs, revoke selected secret types, and open a local or hosted report viewer.
### 为什么软件包爱好者会关心
For package collectors, Kingfisher sits in the modern secret-scanner lineage with Gitleaks, TruffleHog, and Nosey Parker, but its package identity is shaped by Rust, Hyperscan/Vectorscan-style performance work, validation, SARIF output, and a report viewer bundled with the CLI.
### 时间线
- 2025-06: MongoDB announced Kingfisher as an open source secret scanner with live validation.
- 2025-06-25: GitHub release v1.12.0 was published.
- 2025-06-26: GitHub releases v1.13.0 and v1.14.0 were published.
- 2026-06-29: GitHub release v1.105.0 was published.
### Related projects
- Kingfisher imports and triages reports from Gitleaks and TruffleHog, references Nosey Parker as part of its scanner lineage, and outputs SARIF for integration with code-scanning workflows.
### 来源
-
-
-
-
-
## 安全说明
没有找到 kingfisher 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。
## 其他软件包管理器记录
- Nix - kingfisher: normalized package name match | nixpkgs package indexes: pkgs/by-name/ki/kingfisher/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
## Combined YAML source
View the package source record on GitHub. [combined/kingfisher.yml](https://github.com/mxcl/pkgdb/blob/main/combined/kingfisher.yml)
## 来源
- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph