# 使用 Homebrew 安装 scrutineer

查看 scrutineer 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:scrutineer
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install scrutineer
```

  证据: local Homebrew formula metadata

## 软件包事实

- **软件包键:** brew:scrutineer
- **软件包管理器:** Homebrew
- **版本:** 2026.07.28.1
- **来源摘要:** Security through scrutiny
- **主页:** <https://github.com/alpha-omega-security/scrutineer>
- **仓库:** <https://github.com/alpha-omega-security/scrutineer>
- **最后更新:** 2026-07-28T22:27:02Z
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- scrutineer (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 2026.07.28.1
## 项目历史与用法

Scrutineer is a local application-security workbench that scans open-source repositories with configurable agent skills, containerized language profiles, conventional analysis tools, and human-gated vulnerability-disclosure workflows. It combines a CLI-launched service with a local web interface for triage, verification, reporting, and release tracking.

### 项目历史

Alpha-Omega introduced the public Scrutineer repository in April 2026 to make repeatable, evidence-focused open-source security review practical without overwhelming maintainers with untriaged reports. The project was packaged as a Go executable with embedded skills and runner profiles, and its first public GitHub release was v2026.07.14.1 in July 2026.

### 采用历史

Scrutineer is an early-stage project. Its distribution includes precompiled Linux and macOS archives, source builds, container images, and a Homebrew formula; the official README also supports Docker, rootless Podman, and Apple's container runtime for isolated scans.

### 使用方式

An operator starts Scrutineer, opens its local web UI, and adds a repository URL, organization, SBOM, external finding report, or local source directory. A triage skill fans out into metadata, dependency, advisory, static-analysis, threat-modeling, and model-backed audit tasks, after which the operator verifies findings and controls disclosure through explicit workflow gates.

### 为什么软件包爱好者会关心

Scrutineer treats package metadata as security context: it discovers manifests, builds SBOMs, looks up registry versions and dependents, checks advisories, and can import dependencies for deeper scans. Its per-ecosystem runner profiles cover common package managers and native-extension cases, making it especially relevant to maintainers interested in the boundary between package graphs, reproducible tooling, and vulnerability disclosure.

### 时间线

- 2026-04: Public repository development began.
- 2026-07: First public GitHub release, v2026.07.14.1.

### Related projects

- Semgrep, zizmor, git-pkgs, and brief are integrated as conventional analysis and repository-inspection tools.
- Claude Code, Codex, and opencode are supported as pluggable agent backends.
- Docker, Podman, and Apple's container CLI provide the supported isolated runner environments.

### 来源

- <https://alpha-omega.dev/blog/scrutineer-scanning-open-source-without-flooding-maintainers/>
- <https://github.com/alpha-omega-security/scrutineer>
- <https://github.com/alpha-omega-security/scrutineer/releases>
- source_facts.package-manager.brew


## 安全说明

没有找到 scrutineer 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ./scrutineer.yaml

## Combined YAML source

View the package source record on GitHub. [combined/scrutineer.yml](https://github.com/mxcl/pkgdb/blob/main/combined/scrutineer.yml)


## 来源

- pkg.so package database
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph