# werf を Homebrew, Nix, zypper でインストール werf のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:werf ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install werf ``` 証拠: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#werf ``` 証拠: nixpkgs package indexes: pkgs/by-name/we/werf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper (92%): ```sh sudo zypper install werf ``` 証拠: openSUSE Tumbleweed package metadata: werf from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ## パッケージ情報 - **パッケージキー:** brew:werf - **パッケージマネージャ:** Homebrew - **バージョン:** 2.74.0 - **ソース概要:** Consistent delivery tool for Kubernetes - **ホームページ:** - **リポジトリ:** - **最終更新:** 2026-07-29T20:21:35Z - **生成日時:** 2026-08-03T19:37:03+00:00 ## 実行可能ファイル - werf (エイリアス) ## インストール挙動 - Bottle: 利用不可 ## バージョンと鮮度 - ページ生成日: 2026-08-03 - マネージャ版: 2.74.0 ## プロジェクトの歴史と使われ方 werf is a Kubernetes delivery CLI from the Flant ecosystem and a CNCF Sandbox project. The project describes itself as a full-cycle CI/CD tool that glues together Git, Dockerfile or Buildah image building, Helm-style deployment, Kubernetes, and a user's existing CI system. ### プロジェクトの歴史 The project began in January 2016 under the earlier `dapp` name, before Kubernetes deployment became central to its identity. The official tenth-anniversary history describes the starting point as an experiment in incremental Docker image building that later grew into an open source delivery ecosystem for Kubernetes applications. In March 2017, dapp gained Kubernetes deployment via Helm charts, shifting the tool from image building toward end-to-end application delivery. The public GitHub repository dates to January 2016, and werf's own retrospective groups the pre-2019 period as the dapp and early werf era before the v1 line. werf v1 covered the December 2018 through March 2020 transition, while the v1.1 and v1.2 eras added production-oriented behavior such as content-based tagging, distributed layer storage, bundles, and increasingly reproducible deployment artifacts. In May 2023, the project began moving away from its Helm fork toward Nelm, a Helm-compatible deployment engine developed as part of the broader werf ecosystem. On December 13, 2022, CNCF accepted werf at Sandbox maturity. That gave the project formal cloud-native foundation status and framed it as a community project rather than only a vendor-maintained delivery tool. ### 採用の歴史 werf's README says it has been used in production since 2017 and that thousands of projects rely on it. The 2026 anniversary post gives a more concrete ecosystem snapshot: 4600+ GitHub stars, 1300+ releases, 18,000+ active projects using werf, 15,000+ commits, 60+ contributors, and 6000+ merged pull requests. Its adoption pattern is strongest among teams that want CI/CD behavior in Git but do not want to replace their existing CI service. werf is designed to run inside GitLab CI, GitHub Actions, or other CI systems while owning the build, publish, deploy, tracking, and cleanup parts of a Kubernetes release. ### 使われ方 A typical werf project keeps a `werf.yaml` file in the source tree and lets the CLI build container images, publish them to a registry, deploy Helm-compatible charts to Kubernetes, track rollout status, and clean old artifacts. This makes werf closer to an application delivery orchestrator than a single-purpose image builder. In package terms, werf matters because it packages several common cloud-native primitives into one repeatable CLI workflow. That role also explains its related projects: Nelm for Helm-compatible deployment, trdl for update channels, kubedog for Kubernetes rollout tracking, and lockgate for synchronization. ### タイムライン - January 2016: project starts as dapp, focused on incremental Docker image building. - March 2017: Kubernetes deployment via Helm becomes part of the tool. - December 2018-March 2020: the v1 era establishes the werf identity. - March-April 2020: content-based tagging and distributed layer storage improve image handling in concurrent CI environments. - November 2020-April 2024: the v1.2 era adds bundle-oriented distribution and broader production delivery behavior. - December 13, 2022: werf joins CNCF as a Sandbox project. - May 2023: the deployment subsystem begins the move away from a Helm fork toward Nelm. - April 2024 onward: werf v2 begins, with ongoing ecosystem work around Nelm and delivery tooling. ### ソース - - - - - ## セキュリティノート infrastructure mutation or orchestration signal. - **Geiger リスク:** orange / 中 - infrastructure mutation or orchestration signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: werf.yaml ## Credential files - Unix: ~/.werf/global_secret_key, .werf_secret_key ## 他のパッケージマネージャ記録 - Nix - werf: normalized package name match | nixpkgs package indexes: pkgs/by-name/we/werf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper - werf - 2.74.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: werf from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | CLI for the Werf CI/CD system | https://github.com/werf/werf - zypper - werf-bash-completion - 2.74.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: werf-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Bash Completion for werf | https://github.com/werf/werf - zypper - werf-fish-completion - 2.74.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: werf-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Fish Completion for werf | https://github.com/werf/werf - zypper - werf-zsh-completion - 2.74.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: werf-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Zsh Completion for werf | https://github.com/werf/werf ## Combined YAML source View the package source record on GitHub. [combined/werf.yml](https://github.com/mxcl/pkgdb/blob/main/combined/werf.yml) ## ソース - pkg.so package database - Geiger risk classifier - curated configuration and credential file locations - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph