atmos

command module

v1.223.0-rc.8 Latest Latest Go to latest Published: Jul 10, 2026 License: Apache-2.0 Imports: 11 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/cloudposse/atmos

Links

README ¶

Run your infrastructure anywhere.

Atmos is the open-source runtime for infrastructure — it builds, authenticates, and ships Terraform, OpenTofu, Kubernetes, Helm, and containers the same way on your laptop, in CI, and with AI agents. Auth, secrets, vendoring, caching, the toolchain, workflows, and CI are built in. Point every environment at the same reusable root modules and treat the rest as configuration. Stop stringing together 25 tools.

Run it on your laptop. Run it the same in CI. Run it with agents.

Everything is open source and free.

[!TIP]

You can try out atmos directly in your browser using GitHub Codespaces

Already start one? Find it here.

Screenshots

Demo
Example of running atmos to describe infrastructure.

Introduction

Atmos turns sprawling cloud infrastructure into one declarative system you can run consistently — locally, in CI/CD, and through AI agents. Model your platform once as stacks and components, authenticate once, and run the same commands everywhere. The same code deploys to every region, environment, and stage with DRY configuration — no copy-paste, no bespoke wrapper scripts, no glue.

Cloud Posse builds and operates production infrastructure on AWS, Azure, and GCP with Atmos every day — and so do startups and enterprises managing thousands of components.

Everything you'd otherwise bolt on

Auth, secrets, vendoring, caching, the toolchain, workflows, CI, and AI are part of the runtime — not a pile of plugins you wire together.

Unified Auth: One identity layer across AWS, Azure, and GCP — SSO, OIDC, and federation. EKS and ECR login happen automatically, and the same identity feeds Terraform, stores, and emulators.
Secrets Management: Declare secrets per environment, source them from 10+ backends (1Password, SSM, Vault, SOPS, and more), and mask them across every channel.
Vendoring: Pull every dependency just-in-time with version pinning and retries — no separate vendor step.
Caching & Mirroring: A native build cache plus a transparent Terraform provider and module registry mirror — warm in CI, instant on your laptop.
Toolchain: Auto-install the exact Terraform, OpenTofu, and Helmfile versions your stacks need — verified by checksum.
Workflows & Automation: Orchestrate, automate, and chain anything with 25+ step types and custom commands across every component.
GitOps & CI/CD: The same commands locally and in CI. Detect affected components, emit matrices, and catch drift.
AI + MCP: Chat about your infrastructure, run 20+ skills, expose Atmos as an MCP server, or add --ai to any command.

Run anything, the same way

Terraform & OpenTofu like a platform team. Plan and apply across every component in dependency order with bounded concurrency. Backends and providers are generated for you, and drift is caught automatically.
Kubernetes & Helm as first-class workloads. Model Helmfile and Kubernetes releases beside the rest of your stack, with the same CLI you already use for Terraform.
Containers and cloud emulators. Containers and dev containers are workloads too — and you can spin up cloud emulators locally so your whole stack runs on your laptop, with no account required to iterate.
Bring your own. Packer, Ansible, or your own component types plug into the same registry the built-ins use.

Your laptop is the CI. CI is your laptop.

Same command, same auth, same secrets, same toolchain — whether you run it locally or in a pipeline. Atmos is git-aware: it detects what changed and plans or applies only the affected components, so CI does exactly the work that changed — nothing more.

Built for your agents

Everything is declarative and self-documenting, so AI agents can reason about your infrastructure instead of stringing together 25 tools and praying. Atmos ships a catalog of portable agent skills — working across Claude Code, Cursor, Gemini, and Copilot — and an MCP server so any agent can install what it needs and drive Atmos directly, as native tools, with no custom integration.

Extend it without forking it

Custom Commands: Wrap any script as a first-class atmos command with flags, args, and identity.
YAML Functions: Resolve state, outputs, secrets, and Git metadata right inside your config.
Hooks: Run infracost, checkov, trivy, or any command on lifecycle events.
Stores: Plug in SSM, Secrets Manager, Key Vault, Vault, Redis, and more for cross-component data.
Validation: Enforce your own guardrails with OPA/Rego policies and JSON Schema.
Templates & Data Sources: Pull live data into your config with Go templates and Gomplate datasources.

Use Cases

Atmos has consistently proven its strength across the cloud infrastructure and DevOps domains:

Managing Large Multi-Account Cloud Environments: Suitable for organizations using multiple cloud accounts to separate different projects or stages of development.
Cross-Platform Cloud Architectures: Ideal for businesses that need to manage configuration of services across AWS, GCP, Azure, etc., to build a cohesive system.
Multi-Tenant Systems for SaaS: Perfect for SaaS companies looking to host multiple customers within a unified infrastructure. Define a baseline tenant configuration once, then onboard new tenants by reusing this baseline through pure configuration — no further code required.
Efficient Multi-Region Deployments: Define baseline configurations with stacks and extend them across regions with DRY principles through imports and inheritance.
Compliant Infrastructure for Regulated Industries: Create vetted configurations that comply with SOC2, HIPAA, HITRUST, PCI, and other standards, then share and reuse them across the organization via service catalogs, component libraries, vendoring, and OPA policies.
Empowering Teams with Self-Service Infrastructure: Let teams manage their infrastructure independently, using predefined templates and policies.

[!TIP] Don't see your use-case listed? Ask us in the #atmos Slack channel, or join us for "Office Hours" every week.

Telemetry

Atmos collects anonymous telemetry to help improve the product by understanding how it's used.

You can opt-out of telemetry collection in either of the following ways:

Set settings.telemetry.enabled: false in your atmos.yaml
Or set the environment variable: ATMOS_TELEMETRY_ENABLED=false

Note for Atmos Pro users: If you're using Atmos Pro, your workspace ID will be included in telemetry events. This allows our team to provide more effective support and assist with troubleshooting as part of your subscription.

To learn more about what is collected and how it works, see the Telemetry Documentation.

Documentation

Find all documentation at: atmos.tools

✨ Contributing

This project is under active development, and we encourage contributions from our community.

Many thanks to our outstanding contributors:

For 🐛 bug reports & feature requests, please use the issue tracker.

In general, PRs are welcome. We follow the typical "fork-and-pull" Git workflow.

Review our Code of Conduct and Contributor Guidelines.
Fork the repo on GitHub
Clone the project to your own machine
Commit changes to your own branch
Push your work back up to your fork
Submit a Pull Request so that we can review your changes

NOTE: Be sure to merge the latest changes from "upstream" before making a pull request!

🌎 Slack Community

Join our Open Source Community on Slack. It's FREE for everyone! Our "SweetOps" community is where you get to talk with others who share a similar vision for how to rollout and manage infrastructure. This is the best place to talk shop, ask questions, solicit feedback, and work together as a community to build totally sweet infrastructure.

Sign up for our newsletter and join 3,000+ DevOps engineers, CTOs, and founders who get insider access to the latest DevOps trends, so you can always stay in the know. Dropped straight into your Inbox every week — and usually a 5-minute read.

📆 Office Hours

Join us every Wednesday via Zoom for your weekly dose of insider DevOps trends, AWS news and Terraform insights, all sourced from our SweetOps community, plus a live Q&A that you can’t find anywhere else. It's FREE for everyone!

License

Preamble to the Apache License, Version 2.0

Complete license is available in the LICENSE file.

Licensed to the Apache Software Foundation (ASF) under one
or more contributor license agreements.  See the NOTICE file
distributed with this work for additional information
regarding copyright ownership.  The ASF licenses this file
to you under the Apache License, Version 2.0 (the
"License"); you may not use this file except in compliance
with the License.  You may obtain a copy of the License at

  https://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing,
software distributed under the License is distributed on an
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
KIND, either express or implied.  See the License for the
specific language governing permissions and limitations
under the License.

Trademarks

All other trademarks referenced herein are the property of their respective owners.

Documentation ¶

There is no documentation for this package.

Source Files ¶

View all Source files

main.go

Directories ¶

Path	Synopsis
agent-skills Package agentskills embeds the official Atmos agent skills into the binary so the CLI can list the full catalog and install skills offline -- no network or Git clone required.	Package agentskills embeds the official Atmos agent skills into the binary so the CLI can list the full catalog and install skills offline -- no network or Git clone required.
cmd
about
ai Package ai provides the AI CLI commands.	Package ai provides the AI CLI commands.
ai/flags
ai/setup
ai/skill
ansible
auth
auth/user
aws
aws/compliance
aws/ecr
aws/eks
aws/security
cast
ci Package ci provides CI/CD integration commands.	Package ci provides CI/CD integration commands.
ci/cache Package cache implements the `atmos ci cache` subcommand group (restore/save/list/delete) for the CI build cache.	Package cache implements the `atmos ci cache` subcommand group (restore/save/list/delete) for the CI build cache.
composition
config
container
devcontainer
emulator
env
git Package git implements the `atmos git` command group, providing Git repository operations (clone, pull, status, diff, commit, push) through the shared pkg/git service and provider registry.	Package git implements the `atmos git` command group, providing Git repository operations (clone, pull, status, diff, commit, push) through the shared pkg/git service and provider registry.
git/hooks Package hooks implements the `atmos git hooks` command group: thin cobra wiring over pkg/git/hooks, which owns the shim install/run/uninstall logic.	Package hooks implements the `atmos git hooks` command group: thin cobra wiring over pkg/git/hooks, which owns the shim install/run/uninstall logic.
helm
helmfile
helmfile/generate
helmfile/source Package source provides CLI commands for managing helmfile component sources.	Package source provides CLI commands for managing helmfile component sources.
internal
kubernetes
list
lsp
markdown
mcp
mcp/client
mcp/mcpcmd Package mcpcmd holds the shared MCP root command variable.	Package mcpcmd holds the shared MCP root command variable.
mcp/server
packer/source Package source provides CLI commands for managing packer component sources.	Package source provides CLI commands for managing packer component sources.
profile
secret Package secret implements the `atmos secret` command group for declarative secrets CRUD.	Package secret implements the `atmos secret` command group for declarative secrets CRUD.
stack
terraform
terraform/backend
terraform/cache Package cache provides the `atmos terraform cache` command group for inspecting and managing the Terraform registry cache.	Package cache provides the `atmos terraform cache` command group for inspecting and managing the Terraform registry cache.
terraform/generate
terraform/generate/required_providers Package required_providers provides CLI commands for generating Terraform required_providers blocks.	Package required_providers provides CLI commands for generating Terraform required_providers blocks.
terraform/generate/varfile
terraform/planfile
terraform/shared Package shared provides utilities shared between terraform and its subpackages.	Package shared provides utilities shared between terraform and its subpackages.
terraform/source Package source provides CLI commands for managing terraform component sources.	Package source provides CLI commands for managing terraform component sources.
terraform/workdir
theme
toolchain
toolchain/registry
vendor
version
version/track Package track implements the `atmos version track` command group: the Atmos Version Tracker's verbs for locking, updating, inspecting, and applying managed external versions.	Package track implements the `atmos version track` command group: the Atmos Version Tracker's verbs for locking, updating, inspecting, and applying managed external versions.
workflow
errors
internal
exec Package exec is a generated GoMock package.	Package exec is a generated GoMock package.
gcp
terraform_backend
tui/atmos
tui/components/code_view
tui/templates
tui/templates/term Package term is a generated GoMock package.	Package term is a generated GoMock package.
tui/utils
tui/workflow
pkg
ai
ai/agent/anthropic
ai/agent/azureopenai
ai/agent/base Package base provides shared utilities for AI provider implementations.	Package base provides shared utilities for AI provider implementations.
ai/agent/base/openaicompat Package openaicompat provides shared utilities for OpenAI-compatible API providers.	Package openaicompat provides shared utilities for OpenAI-compatible API providers.
ai/agent/bedrock
ai/agent/claudecode Package claudecode provides an AI provider that invokes the Claude Code CLI as a subprocess, reusing the user's Claude Pro/Max subscription instead of requiring separate API tokens.	Package claudecode provides an AI provider that invokes the Claude Code CLI as a subprocess, reusing the user's Claude Pro/Max subscription instead of requiring separate API tokens.
ai/agent/codexcli Package codexcli provides an AI provider that invokes the OpenAI Codex CLI as a subprocess, reusing the user's ChatGPT Plus/Pro subscription.	Package codexcli provides an AI provider that invokes the OpenAI Codex CLI as a subprocess, reusing the user's ChatGPT Plus/Pro subscription.
ai/agent/copilotcli Package copilotcli provides an AI provider that invokes the GitHub Copilot CLI as a subprocess, reusing the user's GitHub Copilot subscription.	Package copilotcli provides an AI provider that invokes the GitHub Copilot CLI as a subprocess, reusing the user's GitHub Copilot subscription.
ai/agent/gemini
ai/agent/geminicli Package geminicli provides an AI provider that invokes the Gemini CLI as a subprocess, reusing the user's Google account (free tier or API key).	Package geminicli provides an AI provider that invokes the Gemini CLI as a subprocess, reusing the user's Google account (free tier or API key).
ai/agent/github Package github provides an AI provider backed by GitHub Models.	Package github provides an AI provider backed by GitHub Models.
ai/agent/grok
ai/agent/ollama
ai/agent/openai
ai/analyze Package analyze provides AI-powered analysis of CLI command output.	Package analyze provides AI-powered analysis of CLI command output.
ai/context
ai/executor
ai/formatter
ai/instructions
ai/registry Package registry provides the AI provider registry for client creation.	Package registry provides the AI provider registry for client creation.
ai/session
ai/skills
ai/skills/marketplace
ai/tools
ai/tools/atmos
ai/tools/permission
ai/tui
ai/types
ansi Package ansi provides utilities for working with ANSI escape sequences in strings.	Package ansi provides utilities for working with ANSI escape sequences in strings.
asciicast
auth
auth/broker Package broker provides a registry of credential brokers: extension points that lazily provision credentials from the ambient environment (not claimed by any stack) and contribute environment variables for remote git and subprocess operations.	Package broker provides a registry of credential brokers: extension points that lazily provision credentials from the ambient environment (not claimed by any stack) and contribute environment variables for remote git and subprocess operations.
auth/cachepaths Package cachepaths is the single source of truth for the root-relative subdirectories under the Atmos XDG cache root (~/.cache/atmos) that hold auth session material (tokens, refresh tokens, client secrets) or provisioned identity/role metadata, and therefore must be excluded from the CI cache.	Package cachepaths is the single source of truth for the root-relative subdirectories under the Atmos XDG cache root (~/.cache/atmos) that hold auth session material (tokens, refresh tokens, client secrets) or provisioned identity/role metadata, and therefore must be excluded from the CI cache.
auth/cloud/aws
auth/cloud/azure
auth/cloud/docker
auth/cloud/gcp Package gcp provides GCP-specific credential file management and environment setup for the Atmos authentication system.	Package gcp provides GCP-specific credential file management and environment setup for the Atmos authentication system.
auth/cloud/kube
auth/credentials
auth/factory
auth/identities/ambient
auth/identities/atmospro Package atmospro implements the `atmos/pro` passthrough identity.	Package atmospro implements the `atmos/pro` passthrough identity.
auth/identities/aws
auth/identities/azure
auth/identities/emulator Package emulator implements the emulator-bound auth identities (kind: aws/emulator, gcp/emulator, azure/emulator, kubernetes/emulator).	Package emulator implements the emulator-bound auth identities (kind: aws/emulator, gcp/emulator, azure/emulator, kubernetes/emulator).
auth/identities/gcp_project Package gcp_project implements the gcp/project identity.	Package gcp_project implements the gcp/project identity.
auth/identities/gcp_service_account Package gcp_service_account implements the gcp/service-account identity.	Package gcp_service_account implements the gcp/service-account identity.
auth/integrations
auth/integrations/aws
auth/integrations/github Package github implements the github/sts auth integration: a just-in-time, least-privilege GitHub token broker for CI.	Package github implements the github/sts auth integration: a just-in-time, least-privilege GitHub token broker for CI.
auth/list
auth/providers/atmospro Package atmospro implements the `atmos/pro` auth provider, which authenticates the Atmos CLI to Atmos Pro by federating a GitHub Actions OIDC token through the Atmos Pro auth endpoint and caching the resulting session JWT.	Package atmospro implements the `atmos/pro` auth provider, which authenticates the Atmos CLI to Atmos Pro by federating a GitHub Actions OIDC token through the Atmos Pro auth endpoint and caching the resulting session JWT.
auth/providers/atmospro/broker Package broker registers the Atmos Pro credential broker, which lazily provisions the github/sts integration in CI so Atmos can read private GitHub repositories (Terraform modules, `source:` components, vendored artifacts, remote imports) even though no stack claims the atmos/pro identity.	Package broker registers the Atmos Pro credential broker, which lazily provisions the github/sts integration in CI so Atmos can read private GitHub repositories (Terraform modules, `source:` components, vendored artifacts, remote imports) even though no stack claims the atmos/pro identity.
auth/providers/aws
auth/providers/azure
auth/providers/gcp_adc Package gcp_adc implements the gcp/adc authentication provider.	Package gcp_adc implements the gcp/adc authentication provider.
auth/providers/gcp_wif Package gcp_wif implements the gcp/workload-identity-federation provider.	Package gcp_wif implements the gcp/workload-identity-federation provider.
auth/providers/github
auth/providers/mock
auth/providers/mock/aws
auth/provisioning
auth/realm Package realm provides credential realm computation and validation for authentication isolation.	Package realm provides credential realm computation and validation for authentication isolation.
auth/types Package types is a generated GoMock package.	Package types is a generated GoMock package.
auth/utils
auth/validation
aws/identity Package identity provides AWS caller identity retrieval and caching.	Package identity provides AWS caller identity retrieval and caching.
aws/organization Package organization is a generated GoMock package.	Package organization is a generated GoMock package.
aws/security Package security is a generated GoMock package.	Package security is a generated GoMock package.
background Package background supervises workflow steps marked `background: true`: a step starts and the workflow continues while Atmos keeps it alive, later waiting for it to become ready (`wait`/`wait-all`) or tearing it down (`cancel`).	Package background supervises workflow steps marked `background: true`: a step starts and the workflow continues while Atmos keeps it alive, later waiting for it to become ready (`wait`/`wait-all`) or tearing it down (`cancel`).
browser
cacerts Package cacerts locates a system-trusted CA bundle for use with subprocesses whose own certificate stores can't be trusted to validate modern TLS chains.	Package cacerts locates a system-trusted CA bundle for use with subprocesses whose own certificate stores can't be trusted to validate modern TLS chains.
cache Package cache provides generic file-based caching with platform-specific locking.	Package cache provides generic file-based caching with platform-specific locking.
ci
ci/artifact Package artifact is a generated GoMock package.	Package artifact is a generated GoMock package.
ci/artifact/github
ci/artifact/local
ci/artifact/s3
ci/cache Package cache provides a CI-provider-scoped remote build cache, modeled on the artifact subsystem (pkg/ci/artifact).	Package cache provides a CI-provider-scoped remote build cache, modeled on the artifact subsystem (pkg/ci/artifact).
ci/cache/github Package github implements the CI cache Backend against the GitHub Actions cache (Cache Service v2).	Package github implements the CI cache Backend against the GitHub Actions cache (Cache Service v2).
ci/internal/plugin Package plugin defines the CI plugin interface and related types for component type abstractions.	Package plugin defines the CI plugin interface and related types for component type abstractions.
ci/internal/provider Package provider defines the CI/CD provider interface and related types.	Package provider defines the CI/CD provider interface and related types.
ci/plugins/helm Package helm provides the CI Plugin implementation for native Helm components.	Package helm provides the CI Plugin implementation for native Helm components.
ci/plugins/helmfile Package helmfile provides the CI Plugin implementation for Helmfile components.	Package helmfile provides the CI Plugin implementation for Helmfile components.
ci/plugins/kubernetes Package kubernetes provides CI job summaries for native Kubernetes components.	Package kubernetes provides CI job summaries for native Kubernetes components.
ci/plugins/terraform Package terraform provides the CI provider implementation for Terraform.	Package terraform provides the CI provider implementation for Terraform.
ci/plugins/terraform/planfile
ci/plugins/terraform/planfile/adapter
ci/providers/generic Package generic provides a fallback CI provider for when --ci flag is used but no specific CI platform is detected.	Package generic provides a fallback CI provider for when --ci flag is used but no specific CI platform is detected.
ci/providers/github Package github provides GitHub Actions CI provider implementation.	Package github provides GitHub Actions CI provider implementation.
ci/templates Package templates provides CI summary template loading and rendering.	Package templates provides CI summary template loading and rendering.
component
component/ansible
component/container
component/custom
component/emulator Package emulator implements the `emulator` component kind: a stack-scoped, long-running cloud-API emulator container (Floci, MiniStack, k3s, OpenBao, …).	Package emulator implements the `emulator` component kind: a stack-scoped, long-running cloud-API emulator container (Floci, MiniStack, k3s, OpenBao, …).
component/helm
component/kubernetes
component/mock
composition Package composition validates component membership in named compositions.	Package composition validates component membership in named compositions.
condition
config Package config is a generated GoMock package.	Package config is a generated GoMock package.
config/adapters Package adapters contains import adapter implementations for the config package.	Package adapters contains import adapter implementations for the config package.
config/casemap Package casemap provides utilities for preserving original case of YAML map keys.	Package casemap provides utilities for preserving original case of YAML map keys.
config/homedir
container
convert
data
datafetcher Package datafetcher is a generated GoMock package.	Package datafetcher is a generated GoMock package.
dependencies
dependency
describe
devcontainer Package devcontainer provides naming and validation for devcontainer instances.	Package devcontainer provides naming and validation for devcontainer instances.
diagnostics
downloader Package downloader is a generated GoMock package.	Package downloader is a generated GoMock package.
duration Package duration provides utilities for parsing human-readable duration strings.	Package duration provides utilities for parsing human-readable duration strings.
emulator Package emulator provides first-class support for cloud-API emulators — long-running container services (Floci, MiniStack, k3s, OpenBao, …) that stand in for AWS, GCP, Azure, Kubernetes, and select backing services during local development and testing.	Package emulator provides first-class support for cloud-API emulators — long-running container services (Floci, MiniStack, k3s, OpenBao, …) that stand in for AWS, GCP, Azure, Kubernetes, and select backing services during local development and testing.
emulator/driver Package driver holds the built-in emulator drivers (floci, k3s, openbao, …).	Package driver holds the built-in emulator drivers (floci, k3s, openbao, …).
emulator/target Package target holds the per-target connection-profile builders for emulator drivers: each turns a live emulator Endpoint into a Profile (SDK env vars, a Terraform provider fragment, or a kubeconfig placeholder).	Package target holds the per-target connection-profile builders for emulator drivers: each turns a live emulator Endpoint into a Profile (SDK env vars, a Terraform provider fragment, or a kubeconfig placeholder).
env Package env provides utilities for working with environment variables.	Package env provides utilities for working with environment variables.
exec Package exec provides a small, mockable abstraction over the standard library os/exec package so that command execution can be substituted in unit tests without spawning real processes.	Package exec provides a small, mockable abstraction over the standard library os/exec package so that command execution can be substituted in unit tests without spawning real processes.
filematch Package filematch is a generated GoMock package.	Package filematch is a generated GoMock package.
filesystem Package filesystem provides file-system utilities for the Atmos CLI, including atomic file writes (POSIX rename and a Windows-compatible remove-before-rename variant) and glob-pattern matching with a bounded, time-limited LRU cache.	Package filesystem provides file-system utilities for the Atmos CLI, including atomic file writes (POSIX rename and a Windows-compatible remove-before-rename variant) and glob-pattern matching with a bounded, time-limited LRU cache.
filetype
flags
flags/compat
flags/global
flags/preprocess
function Package function provides a format-agnostic function registry for Atmos.	Package function provides a format-agnostic function registry for Atmos.
function/resolution
function/tag Package tag provides YAML tag constants and validation for Atmos functions.	Package tag provides YAML tag constants and validation for Atmos functions.
generator Package generator provides sentinel error aliases from the central errors package.	Package generator provides sentinel error aliases from the central errors package.
generator/providers Package providers provides a generator for Terraform provider override files.	Package providers provides a generator for Terraform provider override files.
generator/required_providers Package required_providers provides a generator for Terraform required_providers blocks.	Package required_providers provides a generator for Terraform required_providers blocks.
generator/varfile Package varfile provides a generator for Terraform variable files (.tfvars.json).	Package varfile provides a generator for Terraform variable files (.tfvars.json).
git Package git is a generated GoMock package.	Package git is a generated GoMock package.
git/hooks Package hooks implements Atmos-managed Git hook shims: writing shim scripts into .git/hooks that delegate to `atmos git hooks run`, removing them, and executing the configured command for a named hook.	Package hooks implements Atmos-managed Git hook shims: writing shim scripts into .git/hooks that delegate to `atmos git hooks run`, removing them, and executing the configured command for a named hook.
git/providers/cli Package cli implements the Git CLI provider: the universal, host-agnostic execution backend that shells out to git.	Package cli implements the Git CLI provider: the universal, host-agnostic execution backend that shells out to git.
github
github/actions Package actions provides utilities for GitHub Actions workflows.	Package actions provides utilities for GitHub Actions workflows.
github/oidc Package oidc reads GitHub Actions OIDC token claims (repository, environment, ref) for runtime context detection.	Package oidc reads GitHub Actions OIDC token claims (repository, environment, ref) for runtime context detection.
helm/plugin
helmfile Package helmfile provides utilities for helmfile configuration and execution, including EKS cluster name resolution and AWS authentication handling.	Package helmfile provides utilities for helmfile configuration and execution, including EKS cluster name resolution and AWS authentication handling.
hooks
hooks/kinds/checkov Package checkov registers the built-in `checkov` hook kind.	Package checkov registers the built-in `checkov` hook kind.
hooks/kinds/git Package git registers the built-in `git` hook kind, which publishes component artifacts to a Git repository on Atmos lifecycle events (e.g.	Package git registers the built-in `git` hook kind, which publishes component artifacts to a Git repository on Atmos lifecycle events (e.g.
hooks/kinds/infracost Package infracost registers the built-in `infracost` hook kind.	Package infracost registers the built-in `infracost` hook kind.
hooks/kinds/kics Package kics registers the built-in `kics` hook kind.	Package kics registers the built-in `kics` hook kind.
hooks/kinds/trivy Package trivy registers the built-in `trivy` hook kind.	Package trivy registers the built-in `trivy` hook kind.
hooks/sarif Package sarif parses SARIF 2.1.0 documents into a normalized Findings representation usable by hook ResultHandlers.	Package sarif parses SARIF 2.1.0 documents into a normalized Findings representation usable by hook ResultHandlers.
http Package http provides a configurable HTTP client with GitHub authentication support.	Package http provides a configurable HTTP client with GitHub authentication support.
http/proxy Package proxy implements a generic, protocol-agnostic caching HTTP proxy.	Package proxy implements a generic, protocol-agnostic caching HTTP proxy.
io
junit Package junit models JUnit XML test reports and provides encoding, decoding, and a markdown renderer.	Package junit models JUnit XML test reports and provides encoding, decoding, and a markdown renderer.
keyring Package keyring provides a credential-agnostic key->string-value secret store backed by the OS keychain (zalando go-keyring), an encrypted file (99designs/keyring), or in-memory/noop backends.	Package keyring provides a credential-agnostic key->string-value secret store backed by the OS keychain (zalando go-keyring), an encrypted file (99designs/keyring), or in-memory/noop backends.
list
list/column
list/dependencies Package dependencies builds and renders the Atmos component dependency graph for the `atmos list dependencies` command.	Package dependencies builds and renders the Atmos component dependency graph for the `atmos list dependencies` command.
list/errors
list/extract
list/filter
list/flags
list/format
list/importresolver
list/output
list/renderer
list/sort
list/tree
list/utils
locals Package locals provides resolution for file-scoped local variables in Atmos stack configurations.	Package locals provides resolution for file-scoped local variables in Atmos stack configurations.
logger
lsp
lsp/client
lsp/server
manifest Package manifest provides shared helpers for decoding, serializing, naming, and packaging Kubernetes manifest objects.	Package manifest provides shared helpers for decoding, serializing, naming, and packaging Kubernetes manifest objects.
matrix
mcp
mcp/client
mcp/router Package router provides smart MCP server selection using a fast AI model to determine which servers are relevant to a user's question.	Package router provides smart MCP server selection using a fast AI model to determine which servers are relevant to a user's question.
merge
oci Package oci provides shared helpers for authenticating to OCI registries.	Package oci provides shared helpers for authenticating to OCI registries.
pager Package pager is a generated GoMock package.	Package pager is a generated GoMock package.
panics Package panics provides a process-wide panic handler that converts uncaught panics into a friendly, actionable crash message while preserving the full stack trace for bug reports.	Package panics provides a process-wide panic handler that converts uncaught panics into a friendly, actionable crash message while preserving the full stack trace for bug reports.
perf
pro Package pro is a generated GoMock package.	Package pro is a generated GoMock package.
pro/dtos
process
profile
profile/list
profile/show
profiler
provenance
provisioner
provisioner/backend
provisioner/lock Package lock provides the built-in after.terraform.init provisioner that keeps .terraform.lock.hcl complete across all configured platforms.	Package lock provides the built-in after.terraform.init provisioner that keeps .terraform.lock.hcl complete across all configured platforms.
provisioner/source Package source provides just-in-time (JIT) vendoring of component sources from source configuration in stack manifests.	Package source provides just-in-time (JIT) vendoring of component sources from source configuration in stack manifests.
provisioner/source/cmd Package cmd provides reusable CLI command builders for source provisioning.	Package cmd provides reusable CLI command builders for source provisioning.
provisioner/target Package target implements provision targets: reusable delivery destinations (kinds) that publish a rendered ProvisionArtifact to a place such as a Git repository, an OCI registry, or a Kubernetes cluster.	Package target implements provision targets: reusable delivery destinations (kinds) that publish a rendered ProvisionArtifact to a place such as a Git repository, an OCI registry, or a Kubernetes cluster.
provisioner/target/git Package git implements the "git" provision target: it publishes a rendered ProvisionArtifact to a managed Git deployment repository by writing the files under a configured path, committing the scoped path, and pushing.	Package git implements the "git" provision target: it publishes a rendered ProvisionArtifact to a managed Git deployment repository by writing the files under a configured path, committing the scoped path, and pushing.
provisioner/workdir
reexec Package reexec provides shared helpers for re-executing Atmos (either self-replacing the current process or spawning a child) with consistent handling of the --chdir flag and ATMOS_CHDIR environment variable.	Package reexec provides shared helpers for re-executing Atmos (either self-replacing the current process or spawning a child) with consistent handling of the --chdir flag and ATMOS_CHDIR environment variable.
retry
runner
runner/step
say Package say provides a cross-platform text-to-speech abstraction.	Package say provides a cross-platform text-to-speech abstraction.
scheduler
scheduler/adapters
schema
secrets
secrets/providers Package providers implements the secret backend providers for the Atmos secrets subsystem.	Package providers implements the secret backend providers for the Atmos secrets subsystem.
secrets/providers/sops
shell Package shell provides generic helpers for launching subprocesses and interactive shells with a caller-supplied environment.	Package shell provides generic helpers for launching subprocesses and interactive shells with a caller-supplied environment.
signals Package signals coordinates process-wide signal handling behavior.	Package signals coordinates process-wide signal handling behavior.
spacelift
stack
stack/imports Package imports provides functionality for processing stack imports, including support for remote imports from URLs via go-getter.	Package imports provides functionality for processing stack imports, including support for remote imports from URLs via go-getter.
store Package store is a generated GoMock package.	Package store is a generated GoMock package.
store/authbridge Package authbridge provides an implementation of store.AuthContextResolver that bridges the store package with the auth system.	Package authbridge provides an implementation of store.AuthContextResolver that bridges the store package with the auth system.
store/sopsauth Package sopsauth bridges the Atmos auth/identity system to the getsops SDK for cloud-KMS SOPS backends.	Package sopsauth bridges the Atmos auth/identity system to the getsops SDK for cloud-KMS SOPS backends.
telemetry
telemetry/mock Package mock_telemetry is a generated GoMock package.	Package mock_telemetry is a generated GoMock package.
template Package template provides utilities for Go template AST inspection and analysis.	Package template provides utilities for Go template AST inspection and analysis.
terminal
terminal/env
terminal/pty
terraform Package terraform provides terraform-specific types and utilities for Atmos.	Package terraform provides terraform-specific types and utilities for Atmos.
terraform/cache Package cache is the lifecycle facade for the Terraform registry cache.	Package cache is the lifecycle facade for the Terraform registry cache.
terraform/clean Package clean provides functionality to clean up Terraform state and artifacts.	Package clean provides functionality to clean up Terraform state and artifacts.
terraform/generate Package generate provides functionality to generate files from the generate section in Atmos stack configuration.	Package generate provides functionality to generate files from the generate section in Atmos stack configuration.
terraform/lockfile Package lockfile parses Terraform/OpenTofu dependency lock files (.terraform.lock.hcl) to extract the exact set of providers and versions a component depends on.	Package lockfile parses Terraform/OpenTofu dependency lock files (.terraform.lock.hcl) to extract the exact set of providers and versions a component depends on.
terraform/mirror Package mirror implements eager, multi-platform pre-seeding of the Terraform registry cache.	Package mirror implements eager, multi-platform pre-seeding of the Terraform registry cache.
terraform/output Package output provides functionality to format and export Terraform outputs in various formats suitable for CI/CD workflows, scripts, and configuration files.	Package output provides functionality to format and export Terraform outputs in various formats suitable for CI/CD workflows, scripts, and configuration files.
terraform/rc Package rc renders Atmos's `components.terraform.rc` section into Terraform's native CLI configuration (HCL) and exposes it to the terraform/tofu subprocess via TF_CLI_CONFIG_FILE.	Package rc renders Atmos's `components.terraform.rc` section into Terraform's native CLI configuration (HCL) and exposes it to the terraform/tofu subprocess via TF_CLI_CONFIG_FILE.
terraform/registry Package registry implements Terraform provider and module registry mirrors as adapters for the generic caching proxy (pkg/http/proxy).	Package registry implements Terraform provider and module registry mirrors as adapters for the generic caching proxy (pkg/http/proxy).
terraform/tfvars Package tfvars partitions Terraform variables into a disk-safe subset and a secret-bearing subset, and renders the secret subset as TF_VAR_* environment variables.	Package tfvars partitions Terraform variables into a disk-safe subset and a secret-bearing subset, and renders the secret subset as TF_VAR_* environment variables.
toolchain
toolchain/filemanager
toolchain/installer
toolchain/lockfile
toolchain/registry
toolchain/registry/aqua
toolchain/registry/atmos
toolchain/registry/cache
toolchain/verification
ui
ui/heatmap
ui/markdown Package markdown provides custom markdown rendering with extended syntax support.	Package markdown provides custom markdown rendering with extended syntax support.
ui/markdown/extensions Package extensions provides custom goldmark extensions for enhanced markdown syntax.	Package extensions provides custom goldmark extensions for enhanced markdown syntax.
ui/spinner
ui/spinner/fps Package fps centralizes the optional spinner redraw-rate override so every spinner in Atmos honors a single control.	Package fps centralizes the optional spinner redraw-rate override so every spinner in Atmos honors a single control.
ui/theme
utils Package utils provides markdown utilities for error handling and output formatting in the Atmos CLI application.	Package utils provides markdown utilities for error handling and output formatting in the Atmos CLI application.
validator Package validator is a generated GoMock package.	Package validator is a generated GoMock package.
vendor
vendoring
vendoring/version Package version resolves the latest allowed upstream version for a vendored Git source: it lists remote tags, parses semantic versions, and applies the configured version constraints.	Package version resolves the latest allowed upstream version for a vendored Git source: it lists remote tags, parses semantic versions, and applies the configured version constraints.
version
version/manager Package manager implements the Atmos Version Tracker: externally managed versions declared in atmos.yaml, resolved into a lock file, and consumed at runtime via the !version YAML function and the .version template context.	Package manager implements the Atmos Version Tracker: externally managed versions declared in atmos.yaml, resolved into a lock file, and consumed at runtime via the !version YAML function and the .version template context.
version/managers Package managers defines the file-manager registry for the Atmos Version Tracker: pluggable scanners/rewriters that keep project files (GitHub Actions workflows, marker-annotated files, rendered templates) in sync with the locked versions.	Package managers defines the file-manager registry for the Atmos Version Tracker: pluggable scanners/rewriters that keep project files (GitHub Actions workflows, marker-annotated files, rendered templates) in sync with the locked versions.
version/managers/githubactions Package githubactions implements the github-actions file manager: it scans workflow files for `uses:` action references, matches them against managed version entries by owner/repo package, and rewrites the ref from the lock.	Package githubactions implements the github-actions file manager: it scans workflow files for `uses:` action references, matches them against managed version entries by owner/repo package, and rewrites the ref from the lock.
version/managers/marker Package marker implements the marker file manager: the Renovate regex-manager equivalent for arbitrary text files.	Package marker implements the marker file manager: the Renovate regex-manager equivalent for arbitrary text files.
version/managers/template Package template implements the template file manager: *.tmpl files are the human-edited source of truth and render to a sibling file with the .tmpl suffix stripped, using the .version context resolved from the lock.	Package template implements the template file manager: *.tmpl files are the human-edited source of truth and render to a sibling file with the .tmpl suffix stripped, using the .version context resolved from the lock.
version/resolver Package resolver defines the datasource resolver registry for the Atmos Version Tracker.	Package resolver defines the datasource resolver registry for the Atmos Version Tracker.
version/resolver/github Package github implements the "github-tags" and "github-releases" datasource resolvers backed by the shared pkg/github client (token chain and rate-limit handling included).	Package github implements the "github-tags" and "github-releases" datasource resolvers backed by the shared pkg/github client (token chain and rate-limit handling included).
version/resolver/oci Package oci implements the "oci-tags" and "docker-tags" datasource resolvers backed by go-containerregistry: tag listing for version discovery and manifest digests for immutable pinning.	Package oci implements the "oci-tags" and "docker-tags" datasource resolvers backed by go-containerregistry: tag listing for version discovery and manifest digests for immutable pinning.
version/resolver/toolchain Package toolchain implements the "toolchain" datasource resolver backed by the Atmos toolchain's Aqua registry.	Package toolchain implements the "toolchain" datasource resolver backed by the Atmos toolchain's Aqua registry.
web
workflow
xdg
yaml Package yaml provides YAML parsing, caching, and utility functions for Atmos.	Package yaml provides YAML parsing, caching, and utility functions for Atmos.
yaml/expand Package expand provides YAML key delimiter expansion for yaml.Node trees.	Package expand provides YAML key delimiter expansion for yaml.Node trees.
tests
testhelpers
testhelpers/httpmock
tools
gomodcheck module
gotcha module
lintroller module

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL