Automic VaultAutomic Vault

brew / Protected-Tool-Abdeckung / Rang 579

buf installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für buf in AI-Agent-Workflows.

agent safety

Agent safety answer

buf manages protobuf linting, generation, and registry workflows.

Credential access

Reads registry tokens, environment variables, and project schema files.

Remote mutation

Can push modules and interact with remote schema registries.

Publish/artifact risk

Can publish schema modules and generated artifacts.

Recommended control

Gate push, registry login, and token-backed commands.

Agent-use guidance

Allow lint/generate; require approval for registry writes and token use.

Installation

Mit Automic Vault installieren

Automic Vault
sudo av install brew:buf

macOS

Homebrewverified · 100%
brew install buf

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install buf

MacPorts ports tree · devel/buf/Portfile · source: api.github.com

Windows

Scoopverified · 92%
scoop install main/buf

Scoop official bucket manifest trees · bucket/buf.json · source: api.github.com

Windows Package Managerverified · 92%
winget install --id bufbuild.buf -e

Windows Package Manager source index · bufbuild.buf · source: cdn.winget.microsoft.com

Plattformhinweise

  • Es waren keine paketspezifischen Plattformhinweise vorhanden.

Überblick

Paketzusammenfassung

New way of working with Protocol Buffers

Befehle und Aliase

  • buf
  • protoc-gen-buf-breaking
  • protoc-gen-buf-lint

Protected-Tool-Abdeckung

Plain Text Buf Registry Token

Buf registry login stores BSR tokens in ~/.netrc by default. Our isotope stores the buf.build token in the macOS keychain and injects it as BUF_TOKEN only while `buf` runs.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Lokaler README-Auszug

Buf Protected-tool coverage

buf registry login stores Buf Schema Registry credentials in ~/.netrc by default. Buf also supports BUF_TOKEN, so the protected-tool coverage migrates the default buf.build token into the macOS keychain and injects it only while buf runs.

The migration removes the matching single-line machine buf.build ... password ... entry from ~/.netrc and preserves unrelated machines.

Caveats

  • We currently migrate buf.build and legacy go.buf.build .netrc entries

only.

  • Multi-line or custom .netrc layouts are detected conservatively and are not

rewritten.

  • Direct execution of the original binary will not receive credentials.

Quelle: local coverage notes

Quelle der Abdeckung

Quellauszug

Caveats

  • Only buf.build and legacy go.buf.build .netrc entries are migrated.
  • Multi-line or custom .netrc layouts are not rewritten.
  • Direct execution of the original binary will not receive credentials.

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
bufcliglobal executable
protoc-gen-buf-breakingcliglobal executable
protoc-gen-buf-lintcliglobal executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-06-10
Manager-Version1.70.0
Manager aktualisiert2026-05-25
lokale Datenok
Upstreamcurrent
neueste erkannte Versionv1.70.0

https://github.com/bufbuild/buf

  • okNo freshness warnings were generated.

Installationsmetadaten

Paketmetadaten

Package keybrew:buf
Version1.70.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/buf
Homepagehttps://github.com/bufbuild/buf
Repositoryhttps://github.com/bufbuild/buf
Upstream docshttps://buf.build/docs/cli
LicenseApache-2.0
Source archivehttps://github.com/bufbuild/buf/archive/refs/tags/v1.70.0.tar.gz
Last updated2026-05-25T22:02:36Z
Pulseupdated
Build dependenciesgo
Bottleavailable (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namebuf
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

buf

nix profile install nixpkgs#buf
  • normalized package name match
  • Matched by: Buf
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/bu/buf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

buf 1.59.0-r6

CLI to work with Protocol Buffers

https://buf.build/

sudo apk add buf
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: buf
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Buf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: buf from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

buf-bash-completion 1.59.0-r6

Bash completions for buf

https://buf.build/

sudo apk add buf-bash-completion
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: buf
  • normalized package name match
  • Matched by: Buf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: buf-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

buf-fish-completion 1.59.0-r6

Fish completions for buf

https://buf.build/

sudo apk add buf-fish-completion
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: buf
  • normalized package name match
  • Matched by: Buf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: buf-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

buf-protoc-plugins 1.59.0-r6

CLI to work with Protocol Buffers (protoc plugins)

https://buf.build/

sudo apk add buf-protoc-plugins
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: buf
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Buf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: buf-protoc-plugins from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

buf-zsh-completion 1.59.0-r6

Zsh completions for buf

https://buf.build/

sudo apk add buf-zsh-completion
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: buf
  • normalized package name match
  • Matched by: Buf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: buf-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
pacman95%

buf 1.70.0-1

A tool for working with Protocol Buffers

https://buf.build

sudo pacman -S buf
  • License: Apache-2.0
  • Architecture: x86_64
  • 1 dependencies
  • normalized package name match
  • Matched by: Buf
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: buf from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
MacPorts95%

buf

sudo port install buf
  • normalized package name match
  • Matched by: Buf
MacPorts ports tree · api.github.com · MacPorts ports tree: devel/buf/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Scoop95%

main/buf

scoop install main/buf
  • normalized package name match
  • Matched by: Buf
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/buf.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

bufbuild.buf

winget install --id bufbuild.buf -e
  • normalized package name match
  • Matched by: Buf
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: bufbuild.buf from https://cdn.winget.microsoft.com/cache/source.msix

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • external package-manager database matches
  • local coverage README
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • secret-handling manifest