macOS
Homebrew已验证 · 100%
brew install trailscraperlocal Homebrew formula metadata
安装
其他安装命令
概览
软件包摘要
Tool to get valuable information out of AWS CloudTrail
项目链接
命令和别名
- trailscraper
历史
项目历史与用法
TrailScraper is a small security-oriented command-line tool for extracting useful information from AWS CloudTrail and working with IAM policies. Its documented workflow centers on selecting or downloading CloudTrail records, then generating or extending IAM policy statements from the observed API activity.
项目历史
The project presents itself as both a CloudTrail analysis tool and a general-purpose IAM policy toolbox. Its README documents Homebrew, pip, and container installation paths, and notes that container images from version 0.7.0 onward moved to GitHub Container Registry while older images remained on DockerHub.
Official release metadata shows TrailScraper continuing as a low-volume but maintained utility through the 2020s, with releases from the 0.5 series in 2018 through 0.10.0 at the end of 2025.
采用历史
TrailScraper's adoption appears concentrated in AWS security and infrastructure workflows rather than broad developer use. The official README leads with `brew install trailscraper`, `pip install trailscraper`, and Docker examples, indicating that its audience is operators who want the tool available in local shells, CI jobs, or short-lived containers.
使用方式
The CLI is used to query CloudTrail directly, download CloudTrail logs from S3, filter downloaded records, and pipe selected records into policy generation. Its examples include account, region, organization-trail, time-window, and assumed-role filters, then show JSON IAM policy output.
为什么软件包爱好者会关心
For package-manager users, TrailScraper is notable as a focused AWS least-privilege helper that can be installed without cloning a security toolkit. Its Homebrew and container install paths make it convenient for ephemeral audits, Terraform-permission discovery, and shell pipelines around AWS credentials.
时间线
- 2018: Official GitHub releases include the 0.5 series.
- 2021: The README notes that current container images starting with 0.7.0 are published on GitHub Container Registry.
- 2025: Official GitHub releases list version 0.10.0.
Related projects
- TrailScraper operates in the same AWS security niche as IAM policy generation, CloudTrail log analysis, and infrastructure-as-code permission discovery tools. Its README also points users to cfn-flip when they want generated policies converted from JSON to CloudFormation YAML.
来源
安全态势
风险级别：orange
infrastructure mutation or orchestration signal.
风险分类器
orange 风险 · 中 置信度 · infrastructure
原因
- infrastructure mutation or orchestration signal
信号
- text:cloud
安装行为
- 未记录 Homebrew bottle 元数据。
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
~/.aws
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
trailscraper | 可执行文件 | 已索引可执行文件 | 从本地可执行文件索引发现。 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-08-03
管理器版本0.10.0
管理器更新时间2026-05-15
本地数据未知
上游不可用
检测到的最新版本未检测到
- OK没有生成新鲜度警告。
安装元数据
软件包元数据
| 软件包键 | brew:trailscraper |
|---|---|
| 版本 | 0.10.0 |
| 软件包管理器 | Homebrew |
| 主页 | https://github.com/flosell/trailscraper |
| 仓库 | https://github.com/flosell/trailscraper |
| 最后更新 | 2026-05-15T13:33:37Z |
| Pulse | updated |
| Bottle | 未记录 |
| 服务 | 未声明 |
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- pkg.so package database
- pkgdb category and tag curation