Automic VaultAutomic Vault

brew

Install buf with Homebrew, apk, MacPorts, Nix, pacman, scoop, winget

New way of working with Protocol Buffers. Version 1.71.0 via Homebrew; verified 2026-06-16.

agent safety

Agent safety answer

buf manages protobuf linting, generation, and registry workflows.

Credential access

Reads registry tokens, environment variables, and project schema files.

Remote mutation

Can push modules and interact with remote schema registries.

Publish/artifact risk

Can publish schema modules and generated artifacts.

Recommended control

Gate push, registry login, and token-backed commands.

Agent-use guidance

Allow lint/generate; require approval for registry writes and token use.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install buf

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install buf

MacPorts ports tree · devel/buf/Portfile · source: api.github.com

Windows

Scoopverified · 92%
scoop install main/buf

Scoop official bucket manifest trees · bucket/buf.json · source: api.github.com

Windows Package Managerverified · 92%
winget install --id bufbuild.buf -e

Windows Package Manager source index · bufbuild.buf · source: cdn.winget.microsoft.com

overview

Package summary

New way of working with Protocol Buffers

Commands and aliases

  • buf
  • protoc-gen-buf-breaking
  • protoc-gen-buf-lint

history

Project history and usage

Buf is a modern Protocol Buffers toolchain centered on the `buf` CLI, replacing many direct `protoc` workflows with module-aware builds, linting, breaking-change detection, formatting, code generation, dependency management, API calls, and access to the Buf Schema Registry.

Project history

Buf was created by Buf Technologies as a developer-tooling layer for Protobuf projects. Its public repository presents it as a modern toolchain for Protobuf rather than a replacement for the schema language itself: it keeps the plugin model familiar to `protoc` users while adding workspace configuration, deterministic checks, and registry-aware workflows.

The project grew beyond a formatter or wrapper into a broader ecosystem: the CLI, Buf Schema Registry, remote plugins, generated SDKs, ConnectRPC, Protobuf-ES, and Protovalidate are all positioned by Buf as related pieces of schema-driven API infrastructure.

Adoption history

Buf adoption followed the pain points of larger Protobuf users: teams wanted one repeatable command for compiling, linting, compatibility checks, and generation instead of per-repository shell scripts around `protoc -I` paths. The CLI is distributed through Homebrew, npm, Docker, Windows installers, binary downloads, tarballs, source builds, and other package managers listed in the input.

Registry features widened its role from local CLI tooling to organization-level schema governance. The Buf Schema Registry stores modules, renders documentation, resolves dependencies, hosts remote plugins, produces generated SDKs, and can enforce schema checks for teams that publish APIs there.

How it is used

Typical CLI use starts with `buf config init`, then `buf build`, `buf format -w`, `buf lint`, `buf breaking --against ...`, and `buf generate`. Projects commonly check in `buf.yaml`, `buf.gen.yaml`, and `buf.lock` so CI and developer laptops run the same Protobuf workflow.

Core CLI features work without a Buf Schema Registry account, while signing in adds private module dependency resolution, remote plugins, generated SDKs, hosted documentation, and server-side checks.

Why package nerds care

Buf matters to package-tooling people because it treats `.proto` files as versioned modules instead of loose source files copied between repos. It brings package-lock and registry patterns familiar from language ecosystems into Protobuf schema distribution.

It is also a notable example of a package manager formula that installs not only the main `buf` binary but companion protoc plugins, making Homebrew a convenient entry point for Protobuf linting and compatibility checks.

Timeline

  • 2020: Early public Buf releases established the CLI around Protobuf build, lint, breaking-change, and generation workflows.
  • 2021: Buf reached a stable v1 line and documented a no-breaking-changes-within-major-version CLI policy.
  • 2020s: The project expanded around the Buf Schema Registry, remote plugins, generated SDKs, ConnectRPC, Protobuf-ES, and Protovalidate.

Related projects

  • `protoc` is the historical compiler that Buf augments for day-to-day Protobuf workflows.
  • The Buf Schema Registry is the hosted registry used for modules, documentation, remote plugins, generated SDKs, and schema checks.
  • ConnectRPC, Protobuf-ES, and Protovalidate are related Buf ecosystem projects named by the official README.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.netrc

executables

Installed executables

CommandKindExposureNote
bufcliglobal executable
protoc-gen-buf-breakingcliglobal executable
protoc-gen-buf-lintcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version1.71.0
manager updated2026-06-16
local dataok
upstreamcurrent
latest detectedv1.71.0

https://github.com/bufbuild/buf

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:buf
Version1.71.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/buf
Homepagehttps://buf.build
Repositoryhttps://github.com/bufbuild/buf
Upstream docshttps://buf.build/docs/cli
LicenseApache-2.0
Source archivehttps://github.com/bufbuild/buf/archive/refs/tags/v1.71.0.tar.gz
Last updated2026-06-16T22:48:07Z
Pulseupdated
Build dependenciesgo
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namebuf
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

buf

nix profile install nixpkgs#buf
  • normalized package name match
  • Matched by: Buf
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/bu/buf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

buf 1.59.0-r6

CLI to work with Protocol Buffers

https://buf.build/

sudo apk add buf
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: buf
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Buf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: buf from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

buf-bash-completion 1.59.0-r6

Bash completions for buf

https://buf.build/

sudo apk add buf-bash-completion
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: buf
  • normalized package name match
  • Matched by: Buf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: buf-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

buf-fish-completion 1.59.0-r6

Fish completions for buf

https://buf.build/

sudo apk add buf-fish-completion
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: buf
  • normalized package name match
  • Matched by: Buf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: buf-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

buf-protoc-plugins 1.59.0-r6

CLI to work with Protocol Buffers (protoc plugins)

https://buf.build/

sudo apk add buf-protoc-plugins
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: buf
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Buf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: buf-protoc-plugins from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

buf-zsh-completion 1.59.0-r6

Zsh completions for buf

https://buf.build/

sudo apk add buf-zsh-completion
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: buf
  • normalized package name match
  • Matched by: Buf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: buf-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
pacman95%

buf 1.70.0-1

A tool for working with Protocol Buffers

https://buf.build

sudo pacman -S buf
  • License: Apache-2.0
  • Architecture: x86_64
  • 1 dependencies
  • normalized package name match
  • Matched by: Buf
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: buf from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
MacPorts95%

buf

sudo port install buf
  • normalized package name match
  • Matched by: Buf
MacPorts ports tree · api.github.com · MacPorts ports tree: devel/buf/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Scoop95%

main/buf

scoop install main/buf
  • normalized package name match
  • Matched by: Buf
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/buf.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

bufbuild.buf

winget install --id bufbuild.buf -e
  • normalized package name match
  • Matched by: Buf
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: bufbuild.buf from https://cdn.winget.microsoft.com/cache/source.msix

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment