Automic VaultAutomic Vault

brew / 受保护工具覆盖 / 排名 579

安装 buf

查看 buf 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

agent safety

Agent safety answer

buf manages protobuf linting, generation, and registry workflows.

Credential access

Reads registry tokens, environment variables, and project schema files.

Remote mutation

Can push modules and interact with remote schema registries.

Publish/artifact risk

Can publish schema modules and generated artifacts.

Recommended control

Gate push, registry login, and token-backed commands.

Agent-use guidance

Allow lint/generate; require approval for registry writes and token use.

安装

使用 Automic Vault 安装

Automic Vault
下载 AV
sudo av install brew:buf

macOS

Homebrewverified · 100%
brew install buf

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install buf

MacPorts ports tree · devel/buf/Portfile · source: api.github.com

Windows

Scoopverified · 92%
scoop install main/buf

Scoop official bucket manifest trees · bucket/buf.json · source: api.github.com

Windows Package Managerverified · 92%
winget install --id bufbuild.buf -e

Windows Package Manager source index · bufbuild.buf · source: cdn.winget.microsoft.com

平台说明

  • 没有特定于此软件包的平台说明。

概览

软件包摘要

New way of working with Protocol Buffers

命令和别名

  • buf
  • protoc-gen-buf-breaking
  • protoc-gen-buf-lint

受保护工具覆盖

Plain Text Buf Registry Token

Buf registry login stores BSR tokens in ~/.netrc by default. Our isotope stores the buf.build token in the macOS keychain and injects it as BUF_TOKEN only while `buf` runs.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

本地 README 摘录

Buf Protected-tool coverage

buf registry login stores Buf Schema Registry credentials in ~/.netrc by default. Buf also supports BUF_TOKEN, so the protected-tool coverage migrates the default buf.build token into the macOS keychain and injects it only while buf runs.

The migration removes the matching single-line machine buf.build ... password ... entry from ~/.netrc and preserves unrelated machines.

Caveats

  • We currently migrate buf.build and legacy go.buf.build .netrc entries

only.

  • Multi-line or custom .netrc layouts are detected conservatively and are not

rewritten.

  • Direct execution of the original binary will not receive credentials.

来源: local coverage notes

覆盖来源

来源摘录

Caveats

  • Only buf.build and legacy go.buf.build .netrc entries are migrated.
  • Multi-line or custom .netrc layouts are not rewritten.
  • Direct execution of the original binary will not receive credentials.

可执行文件

已安装的可执行文件

命令类型暴露范围备注
bufcliglobal executable
protoc-gen-buf-breakingcliglobal executable
protoc-gen-buf-lintcliglobal executable

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-06-10
管理器版本1.70.0
管理器更新时间2026-05-25
本地数据ok
上游current
检测到的最新版本v1.70.0

https://github.com/bufbuild/buf

  • okNo freshness warnings were generated.

安装元数据

软件包元数据

Package keybrew:buf
Version1.70.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/buf
Homepagehttps://github.com/bufbuild/buf
Repositoryhttps://github.com/bufbuild/buf
Upstream docshttps://buf.build/docs/cli
LicenseApache-2.0
Source archivehttps://github.com/bufbuild/buf/archive/refs/tags/v1.70.0.tar.gz
Last updated2026-05-25T22:02:36Z
Pulseupdated
Build dependenciesgo
Bottleavailable (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namebuf
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

buf

nix profile install nixpkgs#buf
  • normalized package name match
  • Matched by: Buf
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/bu/buf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

buf 1.59.0-r6

CLI to work with Protocol Buffers

https://buf.build/

sudo apk add buf
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: buf
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Buf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: buf from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

buf-bash-completion 1.59.0-r6

Bash completions for buf

https://buf.build/

sudo apk add buf-bash-completion
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: buf
  • normalized package name match
  • Matched by: Buf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: buf-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

buf-fish-completion 1.59.0-r6

Fish completions for buf

https://buf.build/

sudo apk add buf-fish-completion
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: buf
  • normalized package name match
  • Matched by: Buf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: buf-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

buf-protoc-plugins 1.59.0-r6

CLI to work with Protocol Buffers (protoc plugins)

https://buf.build/

sudo apk add buf-protoc-plugins
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: buf
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Buf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: buf-protoc-plugins from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

buf-zsh-completion 1.59.0-r6

Zsh completions for buf

https://buf.build/

sudo apk add buf-zsh-completion
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: buf
  • normalized package name match
  • Matched by: Buf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: buf-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
pacman95%

buf 1.70.0-1

A tool for working with Protocol Buffers

https://buf.build

sudo pacman -S buf
  • License: Apache-2.0
  • Architecture: x86_64
  • 1 dependencies
  • normalized package name match
  • Matched by: Buf
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: buf from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
MacPorts95%

buf

sudo port install buf
  • normalized package name match
  • Matched by: Buf
MacPorts ports tree · api.github.com · MacPorts ports tree: devel/buf/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Scoop95%

main/buf

scoop install main/buf
  • normalized package name match
  • Matched by: Buf
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/buf.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

bufbuild.buf

winget install --id bufbuild.buf -e
  • normalized package name match
  • Matched by: Buf
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: bufbuild.buf from https://cdn.winget.microsoft.com/cache/source.msix

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • external package-manager database matches
  • local coverage README
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • secret-handling manifest