# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Type CLI, Resources for DevOps / SRE: 95 items. > Deployment, monitoring, cloud resources and reliability. - [Dagger](https://hebbmind.com/pt-BR/cli/dagger.md): [CLI] Programmable software delivery engine: write build, test and release pipelines with SDKs in Go, Python, TypeScript and five other languages, all running in containers so local and CI behave the same, with built-in OpenTelemetry tracing. Needs a container runtime such as Docker. - [cloudflared](https://hebbmind.com/pt-BR/cli/cloudflared.md): [CLI] Official Cloudflare Tunnel client: exposes local services to the internet without opening firewall ports and can proxy TCP access like SSH and RDP. Named tunnels need a Cloudflare account and domain; quick tunnels work without signing in. - [yq](https://hebbmind.com/pt-BR/cli/yq.md): [CLI] Lightweight command-line processor with jq-like syntax for reading, modifying and converting YAML, JSON, XML, INI, CSV and more, including in-place config edits. A single dependency-free Go binary. - [pre-commit](https://hebbmind.com/pt-BR/cli/pre-commit.md): [CLI] Multi-language git hook manager: declare formatting, lint, secret scanning and other hooks in .pre-commit-config.yaml to run automatically before each commit, or have the agent self-check with pre-commit run --all-files before committing. - [direnv](https://hebbmind.com/pt-BR/cli/direnv.md): [CLI] Loads and unloads environment variables per directory: reads .envrc (and optionally .env) when you enter a project and restores the environment when you leave, so configs and secrets do not leak between projects. Hook it into bash, zsh, fish or another shell first. - [Prowler](https://hebbmind.com/pt-BR/cli/prowler.md): [CLI] Security baseline and compliance checks for AWS, Azure, GCP, Kubernetes, GitHub, M365 and more, with built-in CIS, NIST, PCI-DSS, SOC 2 and other frameworks. Generates reports or opens a local dashboard. Configure credentials for each cloud account first. - [Nmap](https://hebbmind.com/pt-BR/cli/nmap.md): [CLI] Classic network discovery and security auditing tool: host discovery, port scanning, service version and OS detection, plus vulnerability checks with NSE scripts. Only scan networks you are authorized to test. - [Grype](https://hebbmind.com/pt-BR/cli/grype.md): [CLI] Scans container images, filesystem directories and SBOMs for known vulnerabilities across major Linux distro packages and many language ecosystems, ranks risk by EPSS and KEV, and filters results with OpenVEX. Good for vulnerability gates in CI. Maintained by Anchore. - [gRPCurl](https://hebbmind.com/pt-BR/cli/grpcurl.md): [CLI] curl for gRPC: call any gRPC method with JSON, including bidirectional streaming, browse service definitions via server reflection, proto source files or protosets, with TLS and mutual TLS support. - [Infracost](https://hebbmind.com/pt-BR/cli/infracost.md): [CLI] Estimates cloud costs of Terraform, Terragrunt, CloudFormation and AWS CDK changes before deployment and checks them against FinOps policies, in the terminal, editor, AI agents or CI. Requires an Infracost account; a free tier is available. - [Dust](https://hebbmind.com/pt-BR/cli/dust.md): [CLI] A du replacement written in Rust that shows disk usage as a directory tree with proportion bars, making large files and folders easy to spot. Filter by depth, count or regex, and output JSON with -j for agents to parse. - [GitHub Copilot CLI](https://hebbmind.com/pt-BR/cli/copilot-cli.md): [CLI] GitHub's official terminal coding agent, sharing its harness with the Copilot coding agent and shipping with the GitHub MCP built in. Work with repos, issues and PRs in natural language, approving each action before it runs. Requires a Copilot subscription. - [OSV-Scanner](https://hebbmind.com/pt-BR/cli/osv-scanner.md): [CLI] Google's official dependency vulnerability scanner: parses project lockfiles and container images, checks them against the OSV.dev database to find affected dependencies, and can suggest upgrade fixes (experimental). - [usql](https://hebbmind.com/pt-BR/cli/usql.md): [CLI] Universal psql-style SQL command line: one tool to connect to PostgreSQL, MySQL, SQLite, SQL Server, Oracle and dozens of other SQL and NoSQL databases, with support for copying data between databases. - [Miller](https://hebbmind.com/pt-BR/cli/miller.md): [CLI] Processes CSV, TSV, JSON and other structured data like awk, sed, cut, join and sort, but by field name, for cleaning, aggregation, format conversion and pretty-printing. The command is mlr; written in Go with no runtime dependencies. - [Checkov](https://hebbmind.com/pt-BR/cli/checkov.md): [CLI] Static scanner for security and compliance issues in Terraform, CloudFormation, Kubernetes, Helm, Dockerfiles and CI pipeline configs, with over a thousand built-in policies and hard-coded secret detection. Outputs SARIF, JSON and more. Maintained by Prisma Cloud. - [Atlas](https://hebbmind.com/pt-BR/cli/atlas.md): [CLI] Manage database schemas as code: declare the desired schema in SQL, HCL or your ORM and Atlas plans, lints and applies migrations, and can export existing databases as HCL, SQL or Mermaid ER diagrams. Supports PostgreSQL, MySQL and a dozen other databases. - [jc](https://hebbmind.com/pt-BR/cli/jc.md): [CLI] Converts the output of 100+ commands such as dig, ps, ls and ifconfig, plus common file formats, into JSON so agents can parse it reliably with jq or scripts. Also usable as a Python library. - [NextTrace](https://hebbmind.com/pt-BR/cli/ntrace-core.md): [CLI] Open-source visual traceroute that shows IP geolocation, AS number and carrier for every hop, with continuous MTR probing and JSON output; the full edition can also be deployed as an MCP server. - [dasel](https://hebbmind.com/pt-BR/cli/dasel.md): [CLI] Query, modify and convert JSON, YAML, TOML, XML, CSV, HCL, INI and more with one selector syntax, editing config files in place or converting between formats, handy for agents handling structured data in scripts. A single dependency-free binary that works much like jq or yq. - [Steampipe](https://hebbmind.com/pt-BR/cli/steampipe.md): [CLI] Query cloud resources and SaaS APIs live with SQL: plugins map AWS, Azure, GCP, GitHub, Kubernetes and other services to tables you can select from directly, no ETL needed. A single binary with Postgres built in. - [App Store Connect CLI](https://hebbmind.com/pt-BR/cli/app-store-connect-cli.md): [CLI] asc CLI for scripting the App Store Connect API: manage builds, TestFlight, metadata, signing and review submissions to automate iOS and macOS releases from the terminal or CI. Ships with a companion agent skill pack. Needs an App Store Connect API key. - [kubectl-ai](https://hebbmind.com/pt-BR/cli/kubectl-ai.md): [CLI] Manage Kubernetes clusters in natural language: translates intent into kubectl operations and runs them, and can serve as an MCP server for other agents. Uses Gemini by default (API key required) and also supports OpenAI and local models. Maintained by Google Cloud. - [sd](https://hebbmind.com/pt-BR/cli/sd.md): [CLI] A more intuitive find-and-replace tool than sed: uses JavaScript/Python-style regex syntax, supports literal string mode and in-place file edits, which suits agents doing bulk text rewrites. - [zizmor](https://hebbmind.com/pt-BR/cli/zizmor.md): [CLI] Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings. - [Docker CLI](https://hebbmind.com/pt-BR/cli/docker-cli.md): [CLI] Docker's official CLI for building images, running and managing containers, viewing logs and pushing to registries, a foundational tool for agents setting up isolated environments. Needs a local or remote Docker Engine such as Docker Desktop. - [Anthropic Sandbox Runtime (srt)](https://hebbmind.com/pt-BR/cli/sandbox-runtime.md): [CLI] Anthropic's official OS-level sandbox CLI: restricts file and network access for agents, MCP servers and any command without containers, using sandbox-exec on macOS and bubblewrap on Linux. Currently a research preview. - [GitHub Agentic Workflows](https://hebbmind.com/pt-BR/cli/gh-aw.md): [CLI] GitHub's official gh extension for writing Actions workflows in Markdown that AI agents execute, compiled into standard Actions. Choose engines like Copilot, Claude Code or Codex; runs in a read-only sandbox by default. Requires gh. - [WP-CLI](https://hebbmind.com/pt-BR/cli/wp-cli.md): [CLI] WordPress's official CLI: install and update plugins and themes, manage posts and users, import and export content, run database search-replace and configure multisite from the terminal, without opening wp-admin. Requires PHP 7.2.24 or later. - [Azure CLI](https://hebbmind.com/pt-BR/cli/azure-cli.md): [CLI] Microsoft's official Azure CLI (az) for managing VMs, storage, resource groups and other Azure resources, with JMESPath queries, table or JSON output and clear exit codes for scripting. Run az login first. - [trash-cli](https://hebbmind.com/pt-BR/cli/trash-cli.md): [CLI] Moves files to the trash instead of deleting them, with commands to list, restore and empty trashed files, so anything an agent deletes by mistake can be recovered. Follows the FreeDesktop.org trash spec and shares the trash with GNOME and KDE. - [Nali](https://hebbmind.com/pt-BR/cli/nali.md): [CLI] Terminal tool for offline IP geolocation and CDN provider lookup, supporting QQwry, GeoIP2, ip2region and other databases. Pipe output from dig, nslookup and similar commands through it to annotate IPs automatically. - [Container Use](https://hebbmind.com/pt-BR/cli/container-use.md): [CLI] From Dagger: gives each coding agent its own container and git branch so multiple agents work in parallel without interfering, with command logs and the ability to take over the terminal at any time. Connects via MCP; needs Docker and Git. Still experimental. - [lychee](https://hebbmind.com/pt-BR/cli/lychee.md): [CLI] Fast async link checker written in Rust that scans websites and Markdown, HTML and other files for broken links and email addresses, with JSON output, config files and an official GitHub Action, often wired into docs CI. - [kubectl](https://hebbmind.com/pt-BR/cli/kubectl.md): [CLI] Kubernetes' official CLI for inspecting and managing Pods, Deployments, Services and other cluster resources, reading logs, executing commands in containers and applying YAML manifests. Requires a working kubeconfig for cluster access. - [OSS Review Toolkit (ORT)](https://hebbmind.com/pt-BR/cli/ort.md): [CLI] The Linux Foundation's open-source compliance toolchain: analyzes project dependencies, scans licenses and copyrights, checks known vulnerabilities, flags policy violations and generates SBOMs and notice files. Needs Java 25 or Docker and ideally 8 GB RAM; have legal review license findings. - [Freshservice CLI (Printing Press)](https://hebbmind.com/pt-BR/cli/freshservice.md): [CLI] Unofficial Freshservice CLI built with Printing Press: lets AI check an IT agent's queue, flag tickets near SLA breach, search tickets and the knowledge base, gauge team workload, spot recurring issues and KB gaps, and manage changes and assets. Needs a Freshservice account and API key. - [Netlify CLI](https://hebbmind.com/pt-BR/cli/netlify-cli.md): [CLI] Netlify's official CLI: deploy sites, run projects locally with Netlify Dev, manage environment variables, Functions and Blobs, and call the Netlify API directly. Needs Node.js 22.13+ and a Netlify account. - [Serverless Devs](https://hebbmind.com/pt-BR/cli/serverless-devs.md): [CLI] Full-lifecycle tool for serverless apps (the s command): describe an app in YAML and deploy it to FaaS platforms such as Alibaba Cloud Function Compute, AWS Lambda and Tencent Cloud SCF, with CI/CD integration. A CNCF Sandbox project; needs cloud provider credentials. - [flyctl](https://hebbmind.com/pt-BR/cli/flyctl.md): [CLI] Fly.io's official CLI (fly): sign in, create and deploy apps, and list apps and check their status, reading fly.toml in the current directory to identify the app. Needs a Fly.io account. - [CLI for Microsoft 365](https://hebbmind.com/pt-BR/cli/cli-microsoft365.md): [CLI] Manages a Microsoft 365 tenant with one m365 command: SharePoint, Teams, OneDrive, Outlook, Planner, Power Platform and more, with JSON output and JMESPath filtering. An open-source PnP community project, not officially supported by Microsoft; register an Entra app before signing in. - [Alibaba Cloud CLI](https://hebbmind.com/pt-BR/cli/aliyun-cli.md): [CLI] Alibaba Cloud's official CLI (aliyun): manage ECS, OSS and other services through OpenAPI, with structured output, JMESPath filtering, waiting on resource states, product plugins and a built-in MCP proxy. Configure credentials first; OAuth sign-in works locally. - [Sentry CLI](https://hebbmind.com/pt-BR/cli/sentry-cli.md): [CLI] Sentry's official CLI: upload source maps and debug symbols, manage releases, and view issues and logs. Needs a Sentry account or self-hosted instance; a newer official CLI is replacing it, so this repo mainly gets bug fixes. - [Railway CLI](https://hebbmind.com/pt-BR/cli/railwayapp-cli.md): [CLI] Railway's official CLI: deploy with railway up and manage infrastructure config, with token auth for non-interactive CI runs. The installer can set up the Railway skill and MCP for Claude Code, Codex and others in one step. Needs a Railway account. - [TencentCloud CLI (TCCLI)](https://hebbmind.com/pt-BR/cli/tencentcloud-cli.md): [CLI] Tencent Cloud's official CLI: call any Tencent Cloud API by product and action name to manage resources (e.g. tccli cvm DescribeZones), with multiple profiles, role credentials and JSON or table output for scripting. Needs a SecretId and SecretKey.