# Install werf with Homebrew, Nix, zypper Consistent delivery tool for Kubernetes. Version 2.72.2 via Homebrew; verified 2026-07-02. ## Install ```sh sudo av install brew:werf ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install werf ``` Evidence: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#werf ``` Evidence: nixpkgs package indexes: pkgs/by-name/we/werf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper (92%): ```sh sudo zypper install werf ``` Evidence: openSUSE Tumbleweed package metadata: werf from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ## Package facts - **Package key:** brew:werf - **Package manager:** Homebrew - **Package manager page:** - **Version:** 2.72.2 - **Source summary:** Consistent delivery tool for Kubernetes - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-07-02T12:13:46Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - werf (cli) - werf (alias) ## Build dependencies - go ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 2.72.2 - Package-manager updated: 2026-07-02 - Local data: ok - Upstream repository: https://github.com/werf/werf - Upstream latest detected: v2.72.2 (current) ## Project history and usage werf is a Kubernetes delivery CLI from the Flant ecosystem and a CNCF Sandbox project. The project describes itself as a full-cycle CI/CD tool that glues together Git, Dockerfile or Buildah image building, Helm-style deployment, Kubernetes, and a user's existing CI system. ### Project history The project began in January 2016 under the earlier `dapp` name, before Kubernetes deployment became central to its identity. The official tenth-anniversary history describes the starting point as an experiment in incremental Docker image building that later grew into an open source delivery ecosystem for Kubernetes applications. In March 2017, dapp gained Kubernetes deployment via Helm charts, shifting the tool from image building toward end-to-end application delivery. The public GitHub repository dates to January 2016, and werf's own retrospective groups the pre-2019 period as the dapp and early werf era before the v1 line. werf v1 covered the December 2018 through March 2020 transition, while the v1.1 and v1.2 eras added production-oriented behavior such as content-based tagging, distributed layer storage, bundles, and increasingly reproducible deployment artifacts. In May 2023, the project began moving away from its Helm fork toward Nelm, a Helm-compatible deployment engine developed as part of the broader werf ecosystem. On December 13, 2022, CNCF accepted werf at Sandbox maturity. That gave the project formal cloud-native foundation status and framed it as a community project rather than only a vendor-maintained delivery tool. ### Adoption history werf's README says it has been used in production since 2017 and that thousands of projects rely on it. The 2026 anniversary post gives a more concrete ecosystem snapshot: 4600+ GitHub stars, 1300+ releases, 18,000+ active projects using werf, 15,000+ commits, 60+ contributors, and 6000+ merged pull requests. Its adoption pattern is strongest among teams that want CI/CD behavior in Git but do not want to replace their existing CI service. werf is designed to run inside GitLab CI, GitHub Actions, or other CI systems while owning the build, publish, deploy, tracking, and cleanup parts of a Kubernetes release. ### How it is used A typical werf project keeps a `werf.yaml` file in the source tree and lets the CLI build container images, publish them to a registry, deploy Helm-compatible charts to Kubernetes, track rollout status, and clean old artifacts. This makes werf closer to an application delivery orchestrator than a single-purpose image builder. In package terms, werf matters because it packages several common cloud-native primitives into one repeatable CLI workflow. That role also explains its related projects: Nelm for Helm-compatible deployment, trdl for update channels, kubedog for Kubernetes rollout tracking, and lockgate for synchronization. ### Timeline - January 2016: project starts as dapp, focused on incremental Docker image building. - March 2017: Kubernetes deployment via Helm becomes part of the tool. - December 2018-March 2020: the v1 era establishes the werf identity. - March-April 2020: content-based tagging and distributed layer storage improve image handling in concurrent CI environments. - November 2020-April 2024: the v1.2 era adds bundle-oriented distribution and broader production delivery behavior. - December 13, 2022: werf joins CNCF as a Sandbox project. - May 2023: the deployment subsystem begins the move away from a Helm fork toward Nelm. - April 2024 onward: werf v2 begins, with ongoing ecosystem work around Nelm and delivery tooling. ### Sources - - - - - ## Security Notes infrastructure mutation or orchestration signal. - **Geiger risk:** orange / medium - infrastructure mutation or orchestration signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: werf.yaml ## Credential files - Unix: ~/.werf/global_secret_key, .werf_secret_key ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** werf - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - werf: normalized package name match | nixpkgs package indexes: pkgs/by-name/we/werf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper - werf - 2.68.2-1.1: normalized package name match | openSUSE Tumbleweed package metadata: werf from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | CLI for the Werf CI/CD system | https://github.com/werf/werf - zypper - werf-bash-completion - 2.68.2-1.1: normalized package name match | openSUSE Tumbleweed package metadata: werf-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Bash Completion for werf | https://github.com/werf/werf - zypper - werf-fish-completion - 2.68.2-1.1: normalized package name match | openSUSE Tumbleweed package metadata: werf-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Fish Completion for werf | https://github.com/werf/werf - zypper - werf-zsh-completion - 2.68.2-1.1: normalized package name match | openSUSE Tumbleweed package metadata: werf-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Zsh Completion for werf | https://github.com/werf/werf ## Related links - [Cloud CLI packages](https://www.automicvault.com/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew. - [helm](https://www.automicvault.com/pkg/brew/helm/) - Shares av.db curated category or tags: cli, cloud-infrastructure, deployment, kubernetes. - [helmfile](https://www.automicvault.com/pkg/brew/helmfile/) - Shares av.db curated category or tags: cli, cloud-infrastructure, deployment, kubernetes. - [helmsman](https://www.automicvault.com/pkg/brew/helmsman/) - Shares av.db curated category or tags: cli, cloud-infrastructure, deployment, kubernetes. - [ko](https://www.automicvault.com/pkg/brew/ko/) - Shares av.db curated category or tags: cli, cloud-infrastructure, deployment, kubernetes. - [krane](https://www.automicvault.com/pkg/brew/krane/) - Shares av.db curated category or tags: cli, cloud-infrastructure, deployment, kubernetes. - [nelm](https://www.automicvault.com/pkg/brew/nelm/) - Shares av.db curated category or tags: cli, cloud-infrastructure, deployment, kubernetes. - [cdk8s](https://www.automicvault.com/pkg/brew/cdk8s/) - Shares av.db curated category or tags: cli, cloud-infrastructure, kubernetes. - [chaoskube](https://www.automicvault.com/pkg/brew/chaoskube/) - Shares av.db curated category or tags: cli, cloud-infrastructure, kubernetes. ## Combined YAML source View the package source record on GitHub. [combined/werf.yml](https://github.com/automic-vault/db/blob/main/combined/werf.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph