openssh

Rolling openssh out to a company Mac fleet

On a managed fleet, installing a command-line tool is a decision rather than a command. EnterpriseBrew puts that decision in one place: who may install openssh, which version they land on, and what is recorded when they do.

• • Approve it for everyone, for one team, or for one person — and let developers request it when it isn’t approved yet.
• • Hold the fleet on the version it has, so an upgrade lands when you decide rather than when upstream ships.
• • See it checked against the best available vulnerability data before it installs, not after the next scan.
• • Keep every install in an audit trail: who, which Mac, which version.