gimme-aws-creds
Install command:
brew install gimme-aws-credsCLI to retrieve AWS credentials from Okta
https://github.com/Nike-Inc/gimme-aws-creds
License: Apache-2.0
Development: Pull requests
Formula JSON API: /api/formula/gimme-aws-creds.json
Formula code: gimme-aws-creds.rb on GitHub
Bottle (binary package) installation support provided for:
| macOS on Apple Silicon |
golden gate | ✅ |
|---|---|---|
| tahoe | ✅ | |
| sequoia | ✅ | |
| Linux | ARM64 | ✅ |
| x86_64 | ✅ |
Current versions:
| stable | ✅ | 2.8.2 |
| head | ⚡️ | HEAD |
Revision: 16
Patches:
| https://github.com/Nike-Inc/gimme-aws-creds/commit/7896145aeb3ed5665a2102d4f3cf43508a2493f4 |
Depends on:
| certifi | 2026.10.23 | Mozilla CA bundle for Python |
| cryptography | 50.0.2 | Cryptographic recipes and primitives for Python |
| libyaml | 0.2.5 | YAML Parser |
| python@3.15 | 3.15.2 | Interpreted, interactive, object-oriented programming language |
Uses from macOS: libffi
Binaries:
gimme-aws-creds,
gimme-aws-creds-autocomplete.sh,
gimme-aws-creds.cmd
Analytics:
| 30 days | 90 days | 365 days | |
|---|---|---|---|
| Installs | 421 | 1,099 | 6,074 |
Installs (--HEAD) | 3 | 4 | 16 |
| Installs on Request | 413 | 1,076 | 5,931 |
Installs on Request (--HEAD) | 3 | 4 | 16 |
Build Errors (--HEAD) | 1 |
Known vulnerabilities in the current version:
| GHSA-pq67-6m6q-mj2v (medium) | urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation |
| GHSA-gm62-xv2j-4w53 | urllib3 allows an unbounded number of links in the decompression chain |
| GHSA-2xpw-w6gg-jr37 | urllib3 streaming API improperly handles highly compressed data |
| GHSA-494j-54xm-rwp3 | AIOHTTP: Secure attribute not enforced for shared cookie |
| GHSA-5wr8-gcqf-gqf3 | aiohttp server lacks an initial request/header timeout |
| GHSA-6cjc-53gc-5rqm | AIOHTTP: Connector pool exhaustion via Max-Age overflow |
| GHSA-9xw5-w5jj-pvcg | AIOHTTP: File descriptor exhaustion in multipart requests |
| GHSA-f9xw-jh8m-3mwq | AIOHTTP: Absolute-form request targets can spoof Request.scheme |
| GHSA-gx76-c99x-2c96 | AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies |
| GHSA-pqxq-w44r-73xw | AIOHTTP: Pure-Python parser request smuggling |
| GHSA-38jv-5279-wg99 (high) | Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API) |
| GHSA-qccp-gfcp-xxvc (medium) | urllib3: Sensitive headers forwarded across origins in proxied low-level redirects |
| GHSA-8988-9cw3-xx77 | urllib3: HTTPS proxy TLS configuration may be ignored or overridden |
| GHSA-vxq7-64xx-v4gw | urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory |
| GHSA-2g87-pp6c-29x5 | aiohttp: Multiple instances of excessive or unbounded memory/CPU use |
Data from Homebrew/advisory-database. Run brew vulns gimme-aws-creds for a live check.