# 使用 Homebrew, Nix 安装 noseyparker 查看 noseyparker 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。 ## 安装 ```sh sudo av install brew:noseyparker ``` 其他安装命令: ### macOS - Homebrew (100%): ```sh brew install noseyparker ``` 证据: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#noseyparker ``` 证据: nixpkgs package indexes: pkgs/by-name/no/noseyparker/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## 软件包事实 - **软件包键:** brew:noseyparker - **软件包管理器:** Homebrew - **版本:** 0.24.0 - **来源摘要:** Finds secrets and sensitive information in textual data and Git history - **主页:** - **仓库:** - **最后更新:** 2026-07-17T17:20:41+09:00 - **已生成:** 2026-08-03T19:37:03+00:00 ## 可执行文件 - noseyparker (别名) ## 安装行为 - Bottle: 不可用 ## 版本和新鲜度 - 页面生成时间: 2026-08-03 - 管理器版本: 0.24.0 ## 项目历史与用法 Nosey Parker is Praetorian's Apache-licensed secrets scanner for textual data and Git history. Its README documents scanning files, directories, full Git history, remote Git URLs, and GitHub users or organizations into a datastore, followed by reporting and triage. ### 项目历史 The GitHub repository was created on 2022-11-08. Help Net Security reported on 2022-12-14 that Praetorian had open-sourced the regular-expression scanning capabilities of its internal Nosey Parker secret scanning tool. A 2023-03-03 Show HN post by the project author explained the older internal origin: Nosey Parker was originally created to help build a labeled dataset of secrets for machine-learning work, then proved useful on its own during Praetorian security engagements. The same post says it was reimplemented in Rust, released as open source in late 2022, and presented at Black Hat Arsenal. The public project evolved from Git-repository scanning toward broader data-source scanning. Praetorian's 2023 blog said it had gained arbitrary file and directory scanning, Docker and firmware image use cases, memory-dump scanning, and simple OSINT enumeration of GitHub organizations and users. The changelog later records SARIF output, extensible enumerators, deduplication, and many new token-specific rules. ### 采用历史 Nosey Parker's adoption niche is application security, cloud security, red-team, and SRE workflows that need high-throughput, lower-noise secret discovery. The project had thousands of GitHub stars by 2026-07-01, is packaged by Homebrew and Nix, and has a companion `noseyparker-explorer` TUI for reviewing and annotating findings. The repository was archived on GitHub on 2026-04-24, making the public repo read-only. That makes the package historically important but also changes its adoption posture: it remains available in package managers, but the upstream public development signal ended at the archive date unless Praetorian publishes a successor elsewhere. ### 使用方式 Practical use starts with `noseyparker scan` against a directory, local Git repository, remote Git URL, or GitHub user/org. The scan writes a datastore such as `cpython.np`; users then generate reports or inspect findings, with deduplication and rules intended to reduce false positives. The README example scans CPython Git history and reports throughput over Git blobs. The HN discussion emphasized Hyperscan-backed simultaneous regex matching as a core speed reason, and described Nosey Parker as especially useful where hardcoded credentials in source code, logs, and public repositories lead to real offensive-security findings. ### 为什么软件包爱好者会关心 Nosey Parker matters because it is a Rust security CLI that treats Git history as first-class input, not just the working tree. It packages secret scanning as a fast local binary with release assets, datastore output, SARIF/reporting paths, GitHub enumeration, and a separate explorer TUI for triage. ### 时间线 - 2022-11-08: GitHub repository created. - 2022-12-14: Praetorian open-source announcement covered by Help Net Security. - 2023-03-03: Show HN post described the Rust rewrite, open-source release, and Black Hat Arsenal presentation. - 2025-05-08: v0.24.0 release published. - 2026-04-24: GitHub repository archived and made read-only. ### Related projects - Related projects include noseyparker-explorer, Hyperscan, GitHub code search, trufflehog, Gitleaks, detect-secrets, and platform secret-scanning systems. ### 来源 - - - - - - - - - ## 安全说明 narrow executable package without higher-risk signals. - **Geiger 风险:** 绿色 / 低 - narrow executable package without higher-risk signals ## 其他软件包管理器记录 - Nix - noseyparker: normalized package name match | nixpkgs package indexes: pkgs/by-name/no/noseyparker/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Combined YAML source View the package source record on GitHub. [combined/noseyparker.yml](https://github.com/mxcl/pkgdb/blob/main/combined/noseyparker.yml) ## 来源 - pkg.so package database - Geiger risk classifier - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph