# 使用 Homebrew, Nix, zypper 安装 werf 查看 werf 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。 ## 安装 ```sh sudo av install brew:werf ``` 其他安装命令: ### macOS - Homebrew (100%): ```sh brew install werf ``` 证据: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#werf ``` 证据: nixpkgs package indexes: pkgs/by-name/we/werf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper (92%): ```sh sudo zypper install werf ``` 证据: openSUSE Tumbleweed package metadata: werf from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ## 软件包事实 - **软件包键:** brew:werf - **软件包管理器:** Homebrew - **版本:** 2.74.0 - **来源摘要:** Consistent delivery tool for Kubernetes - **主页:** - **仓库:** - **最后更新:** 2026-07-29T20:21:35Z - **已生成:** 2026-08-03T19:37:03+00:00 ## 可执行文件 - werf (别名) ## 安装行为 - Bottle: 不可用 ## 版本和新鲜度 - 页面生成时间: 2026-08-03 - 管理器版本: 2.74.0 ## 项目历史与用法 werf is a Kubernetes delivery CLI from the Flant ecosystem and a CNCF Sandbox project. The project describes itself as a full-cycle CI/CD tool that glues together Git, Dockerfile or Buildah image building, Helm-style deployment, Kubernetes, and a user's existing CI system. ### 项目历史 The project began in January 2016 under the earlier `dapp` name, before Kubernetes deployment became central to its identity. The official tenth-anniversary history describes the starting point as an experiment in incremental Docker image building that later grew into an open source delivery ecosystem for Kubernetes applications. In March 2017, dapp gained Kubernetes deployment via Helm charts, shifting the tool from image building toward end-to-end application delivery. The public GitHub repository dates to January 2016, and werf's own retrospective groups the pre-2019 period as the dapp and early werf era before the v1 line. werf v1 covered the December 2018 through March 2020 transition, while the v1.1 and v1.2 eras added production-oriented behavior such as content-based tagging, distributed layer storage, bundles, and increasingly reproducible deployment artifacts. In May 2023, the project began moving away from its Helm fork toward Nelm, a Helm-compatible deployment engine developed as part of the broader werf ecosystem. On December 13, 2022, CNCF accepted werf at Sandbox maturity. That gave the project formal cloud-native foundation status and framed it as a community project rather than only a vendor-maintained delivery tool. ### 采用历史 werf's README says it has been used in production since 2017 and that thousands of projects rely on it. The 2026 anniversary post gives a more concrete ecosystem snapshot: 4600+ GitHub stars, 1300+ releases, 18,000+ active projects using werf, 15,000+ commits, 60+ contributors, and 6000+ merged pull requests. Its adoption pattern is strongest among teams that want CI/CD behavior in Git but do not want to replace their existing CI service. werf is designed to run inside GitLab CI, GitHub Actions, or other CI systems while owning the build, publish, deploy, tracking, and cleanup parts of a Kubernetes release. ### 使用方式 A typical werf project keeps a `werf.yaml` file in the source tree and lets the CLI build container images, publish them to a registry, deploy Helm-compatible charts to Kubernetes, track rollout status, and clean old artifacts. This makes werf closer to an application delivery orchestrator than a single-purpose image builder. In package terms, werf matters because it packages several common cloud-native primitives into one repeatable CLI workflow. That role also explains its related projects: Nelm for Helm-compatible deployment, trdl for update channels, kubedog for Kubernetes rollout tracking, and lockgate for synchronization. ### 时间线 - January 2016: project starts as dapp, focused on incremental Docker image building. - March 2017: Kubernetes deployment via Helm becomes part of the tool. - December 2018-March 2020: the v1 era establishes the werf identity. - March-April 2020: content-based tagging and distributed layer storage improve image handling in concurrent CI environments. - November 2020-April 2024: the v1.2 era adds bundle-oriented distribution and broader production delivery behavior. - December 13, 2022: werf joins CNCF as a Sandbox project. - May 2023: the deployment subsystem begins the move away from a Helm fork toward Nelm. - April 2024 onward: werf v2 begins, with ongoing ecosystem work around Nelm and delivery tooling. ### 来源 - - - - - ## 安全说明 infrastructure mutation or orchestration signal. - **Geiger 风险:** orange / 中 - infrastructure mutation or orchestration signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: werf.yaml ## Credential files - Unix: ~/.werf/global_secret_key, .werf_secret_key ## 其他软件包管理器记录 - Nix - werf: normalized package name match | nixpkgs package indexes: pkgs/by-name/we/werf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper - werf - 2.74.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: werf from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | CLI for the Werf CI/CD system | https://github.com/werf/werf - zypper - werf-bash-completion - 2.74.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: werf-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Bash Completion for werf | https://github.com/werf/werf - zypper - werf-fish-completion - 2.74.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: werf-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Fish Completion for werf | https://github.com/werf/werf - zypper - werf-zsh-completion - 2.74.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: werf-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Zsh Completion for werf | https://github.com/werf/werf ## Combined YAML source View the package source record on GitHub. [combined/werf.yml](https://github.com/mxcl/pkgdb/blob/main/combined/werf.yml) ## 来源 - pkg.so package database - Geiger risk classifier - curated configuration and credential file locations - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph