# 使用 Homebrew 安装 tfprovidercheck

查看 tfprovidercheck 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:tfprovidercheck
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install tfprovidercheck
```

  证据: local Homebrew formula metadata

## 软件包事实

- **软件包键:** brew:tfprovidercheck
- **软件包管理器:** Homebrew
- **版本:** 1.0.7
- **来源摘要:** CLI to prevent malicious Terraform Providers from being executed
- **主页:** <https://github.com/suzuki-shunsuke/tfprovidercheck>
- **仓库:** <https://github.com/suzuki-shunsuke/tfprovidercheck>
- **最后更新:** 2026-07-26T00:50:39+02:00
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- tfprovidercheck (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 1.0.7
## 项目历史与用法

tfprovidercheck is a Terraform provider allow-list checker intended to prevent disallowed or malicious Terraform providers from being executed. Its README positions it as a security and governance tool to run after terraform init and before commands such as validate, plan, or apply.

### 项目历史

The project was built around a simple policy model: read `terraform version -json`, compare provider names and optional version constraints against a YAML allow list, and fail when a disallowed provider appears. The README contrasts this with `.terraform.lock.hcl` and `required_providers`, arguing that those mechanisms do not provide the same centralized provider allow-list control.

### 采用历史

Adoption appears concentrated in CI and platform-engineering contexts. Homebrew packages tfprovidercheck as a bottled formula, while the README emphasizes GitHub Actions usage and environment-variable configuration for workflows where pull requests should not be able to tamper with the policy.

### 使用方式

Typical usage pipes `terraform version -json` into `tfprovidercheck`, optionally passing `-config`. Configuration can come from a command-line path, `TFPROVIDERCHECK_CONFIG_BODY`, `TFPROVIDERCHECK_CONFIG`, or `.tfprovidercheck.yaml` in the current directory.

### 为什么软件包爱好者会关心

For package-focused infrastructure users, tfprovidercheck is notable because it treats Terraform providers as executable dependencies that need admission control. It packages that check as a small CLI suitable for CI images, Homebrew installs, and repository policy workflows.

### 时间线

- 2025: GitHub tags list v1.0.6 in July and v1.0.7 in December.
- 2026: Homebrew formula metadata lists stable version 1.0.7 with bottled builds.

### Related projects

- Terraform CLI
- .terraform.lock.hcl
- Terraform required_providers
- GitHub Actions

### 来源

- <https://formulae.brew.sh/api/formula/tfprovidercheck.json>
- <https://github.com/suzuki-shunsuke/tfprovidercheck#readme>
- <https://github.com/suzuki-shunsuke/tfprovidercheck/tags>


## 安全说明

narrow executable package without higher-risk signals.

- **Geiger 风险:** 绿色 / 低
- narrow executable package without higher-risk signals


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: .tfprovidercheck.yaml

## Combined YAML source

View the package source record on GitHub. [combined/tfprovidercheck.yml](https://github.com/mxcl/pkgdb/blob/main/combined/tfprovidercheck.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph