StackGuardian Homebrew tap

Homebrew formulae for StackGuardian's command-line tools, for macOS and Linux.

brew tap StackGuardian/tap

Available formulae

Formula	What it is
sg-cli	Manages resources on the StackGuardian platform
sg-dr	Recovers StackGuardian-managed infrastructure when StackGuardian is unavailable

brew install stackguardian/tap/sg-cli
brew install stackguardian/tap/sg-dr

Homebrew 6.0 wants trust before loading a tap outside its own. Granting it once covers every formula here, including any added later:

brew trust --tap stackguardian/tap

Homebrew's own advice is to trust individual items where you can. If you only ever want one of these tools, brew trust --formula stackguardian/tap/sg-dr grants strictly less.

Shell completions

Both formulae install completions for bash, zsh and fish, generated from the binary being installed so they match that version's commands and flags. They work once Homebrew's completion directories are wired into your shell, which brew shellenv does for zsh and fish; bash additionally needs brew install bash-completion@2. Open a new shell after installing.

Verifying what you install

Formulae pin the SHA-256 of every archive, so Homebrew refuses anything that does not match. The releases are signed as well, and for sg-dr — a tool meant to be stored long before it is needed, and trusted when it is — verifying that signature is worth doing at least once. The command is on its release page.

Older versions

Homebrew installs the current release and cannot install an arbitrary older one from a formula. Every release commits a new formula here, so this repository's git history holds them all, and a past version can be extracted into a tap of your own:

brew extract --version=1.0.0 stackguardian/tap/sg-dr <your-tap>

For sg-dr, the signed archives on its releases page are the better way to obtain and keep a specific version.

How this tap is maintained

Formulae are generated from each tool's published release checksums rather than edited by hand, so the pinned hashes always match what was released. A scheduled workflow watches for new releases and opens a pull request to bump them, and brew test-bot installs and tests the formula on macOS and Linux before it merges.