認証情報アクセス
Reads registry tokens, environment variables, and project schema files.
brew
buf のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。
エージェント安全性
buf manages protobuf linting, generation, and registry workflows.
Reads registry tokens, environment variables, and project schema files.
Can push modules and interact with remote schema registries.
Can publish schema modules and generated artifacts.
Gate push, registry login, and token-backed commands.
Allow lint/generate; require approval for registry writes and token use.
インストール
brew install buflocal Homebrew formula metadata
sudo port install bufMacPorts ports tree · devel/buf/Portfile · ソース: api.github.com
sudo apk add bufAlpine Linux edge package indexes · buf · ソース: dl-cdn.alpinelinux.org
nix profile install nixpkgs#bufnixpkgs package indexes · pkgs/by-name/bu/buf/package.nix · ソース: api.github.com
sudo pacman -S bufArch Linux sync databases · buf · ソース: geo.mirror.pkgbuild.com
scoop install main/bufScoop official bucket manifest trees · bucket/buf.json · ソース: api.github.com
winget install --id bufbuild.buf -eWindows Package Manager source index · bufbuild.buf · ソース: cdn.winget.microsoft.com
概要
New way of working with Protocol Buffers
履歴
Buf is a modern Protocol Buffers toolchain centered on the `buf` CLI, replacing many direct `protoc` workflows with module-aware builds, linting, breaking-change detection, formatting, code generation, dependency management, API calls, and access to the Buf Schema Registry.
Buf was created by Buf Technologies as a developer-tooling layer for Protobuf projects. Its public repository presents it as a modern toolchain for Protobuf rather than a replacement for the schema language itself: it keeps the plugin model familiar to `protoc` users while adding workspace configuration, deterministic checks, and registry-aware workflows.
The project grew beyond a formatter or wrapper into a broader ecosystem: the CLI, Buf Schema Registry, remote plugins, generated SDKs, ConnectRPC, Protobuf-ES, and Protovalidate are all positioned by Buf as related pieces of schema-driven API infrastructure.
Buf adoption followed the pain points of larger Protobuf users: teams wanted one repeatable command for compiling, linting, compatibility checks, and generation instead of per-repository shell scripts around `protoc -I` paths. The CLI is distributed through Homebrew, npm, Docker, Windows installers, binary downloads, tarballs, source builds, and other package managers listed in the input.
Registry features widened its role from local CLI tooling to organization-level schema governance. The Buf Schema Registry stores modules, renders documentation, resolves dependencies, hosts remote plugins, produces generated SDKs, and can enforce schema checks for teams that publish APIs there.
Typical CLI use starts with `buf config init`, then `buf build`, `buf format -w`, `buf lint`, `buf breaking --against ...`, and `buf generate`. Projects commonly check in `buf.yaml`, `buf.gen.yaml`, and `buf.lock` so CI and developer laptops run the same Protobuf workflow.
Core CLI features work without a Buf Schema Registry account, while signing in adds private module dependency resolution, remote plugins, generated SDKs, hosted documentation, and server-side checks.
Buf matters to package-tooling people because it treats `.proto` files as versioned modules instead of loose source files copied between repos. It brings package-lock and registry patterns familiar from language ecosystems into Protobuf schema distribution.
It is also a notable example of a package manager formula that installs not only the main `buf` binary but companion protoc plugins, making Homebrew a convenient entry point for Protobuf linting and compatibility checks.
セキュリティ状態
narrow executable package without higher-risk signals.
リスク グリーン · 信頼度 低 · appliance
エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Credential-bearing paths to review before unattended agent runs.
~/.netrc実行可能ファイル
| コマンド | 種類 | 公開範囲 | メモ |
|---|---|---|---|
buf | cli | グローバル実行可能ファイル | |
protoc-gen-buf-breaking | cli | グローバル実行可能ファイル | |
protoc-gen-buf-lint | cli | グローバル実行可能ファイル |
鮮度
これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。
https://github.com/bufbuild/buf
インストールメタデータ
| パッケージキー | brew:buf |
|---|---|
| バージョン | 1.72.0 |
| パッケージマネージャ | Homebrew |
| パッケージマネージャページ | https://formulae.brew.sh/formula/buf |
| ホームページ | https://buf.build |
| リポジトリ | https://github.com/bufbuild/buf |
| 上流ドキュメント | https://buf.build/docs/cli |
| ライセンス | Apache-2.0 |
| ソースアーカイブ | https://github.com/bufbuild/buf/archive/refs/tags/v1.72.0.tar.gz |
| 最終更新 | 2026-07-17T20:53:06Z |
| Pulse | updated |
| ビルド依存関係 | go |
| Bottle | 利用可能 (対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | 未定義 |
| サービス | 宣言なし |
レジストリ情報
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | buf |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
ソースデータベース一致
一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。
buf
nix profile install nixpkgs#bufbuf 1.59.0-r6
CLI to work with Protocol Buffers
sudo apk add bufbuf-bash-completion 1.59.0-r6
Bash completions for buf
sudo apk add buf-bash-completionbuf-fish-completion 1.59.0-r6
Fish completions for buf
sudo apk add buf-fish-completionbuf-protoc-plugins 1.59.0-r6
CLI to work with Protocol Buffers (protoc plugins)
sudo apk add buf-protoc-pluginsbuf-zsh-completion 1.59.0-r6
Zsh completions for buf
sudo apk add buf-zsh-completionbuf 1.70.0-1
A tool for working with Protocol Buffers
sudo pacman -S bufbuf
sudo port install bufmain/buf
scoop install main/bufbufbuild.buf
winget install --id bufbuild.buf -eソース経路
このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。
View the package source record on GitHub.