Show HN: Vet – A tool for safely running remote shell scripts

4 months ago 35

Don't just run it — vet it.

Stop blindly piping to bash. vet lets you inspect remote scripts for changes, run them through a linter, and require your explicit approval before they can execute.

The Problem

We've all seen this pattern for installing software:

curl -sSL https://example.com/install.sh | bash

This is dangerous. The script could be malicious, the server could be compromised, or a transient network error could result in executing a partial script.

The Solution

vet wraps this process in a secure, interactive workflow:

  • Fetch: It downloads the remote script to a temporary location.

  • Diff & Review: It shows you what, if anything, has changed since the last time you ran this script.

  • Lint: If you have shellcheck installed, it automatically analyzes the script for potential bugs or malicious patterns.

  • Confirm: It prompts you for explicit approval before executing anything.

vet https://example.com/install.sh

Installation

In your terminal, run:

curl -sL https://getvet.sh | sh
Read Entire Article