werf

Spec sheet

Purpose

werf is a solution for efficient and consistent software delivery to Kubernetes covering the CI/CD lifecycle and related artifacts.Read 30 Sep 2026 · cncf.io

Product

werf is an open-source tool for building images, running tests, distributing release artifacts, and deploying applications to Kubernetes.Read 30 Sep 2026 · werf.io

Deployment

The werf converge command builds images and deploys an application, and deployment tracking waits for resources to become ready by default.Read 30 Sep 2026 · werf.io

All-in-one workflow

werf builds images, runs tests, distributes release artifacts, and deploys applications to Kubernetes in one tool.Read 30 Sep 2026 · werf.io

Build backends

werf supports Docker and the embedded Buildah backend, which supports secure daemonless rootless builds.Read 30 Sep 2026 · werf.io

Build reproducibility

werf uses content-based tagging, shared registry caching, and immutable images that are not rebuilt for the same commit.Read 30 Sep 2026 · werf.io

Buildah platform limit

Buildah is available on Linux and Windows with WSL2, while macOS users are advised to use a virtual machine.Read 30 Sep 2026 · werf.io

Builds

werf supports Dockerfiles and Stapel, an alternative assembly syntax, for defining image builds.Read 30 Sep 2026 · werf.io

Caching

werf supports incremental builds that rebuild modified components and reuse existing layers from a container registry.Read 30 Sep 2026 · werf.io

CI integrations

werf provides ready-made integrations for GitLab CI/CD and GitHub Actions.Read 30 Sep 2026 · werf.io

Community

The homepage says developers are in contact with the community and lists Telegram, Bluesky, and GitHub Discussions.Read 30 Sep 2026 · werf.io

Community and governance

werf developers engage through Telegram, Bluesky, GitHub Discussions, and the project is a CNCF sandbox project.Read 30 Sep 2026 · werf.io

Container registries

Documented registry implementations include ECR, ACR, Docker Hub, GCR, GitHub, GitLab, Harbor, and Quay.Read 30 Sep 2026 · werf.io

Encrypted secrets

werf supports encrypted secret parameter files stored in a Git repository and decrypted during use.Read 30 Sep 2026 · werf.io

Giterminism

werf uses Giterminism to encourage keeping delivery configuration in Git as the source of truth.Read 30 Sep 2026 · werf.io

Local requirements

The Linux-and-Docker setup requires Bash, Git 2.18 or newer, Docker Engine, a Kubernetes cluster, and a public container registry.Read 30 Sep 2026 · werf.io

Operating systems

The Getting Started guide includes Linux, macOS, and Windows workflows.Read 30 Sep 2026 · werf.io

Project origin

The homepage says werf was originally created by Flant and identifies werf as a CNCF sandbox project.Read 30 Sep 2026 · werf.io

Project start

The maker's publication says werf's first commit was on January 22, 2016.Read 30 Sep 2026 · werf.io

Secret handling

werf can encrypt Helm secret parameter files for storage in Git; decrypting them requires the secret key.Read 30 Sep 2026 · werf.io

Signed downloads

werf publishes Linux, macOS, and Windows binaries with PGP signatures that can be verified.Read 30 Sep 2026 · github.com

Technology integrations

werf relies on Git, Buildah, Helm, Kubernetes, and the user’s CI system.Read 30 Sep 2026 · werf.io

Telemetry

werf collects anonymous usage data, and telemetry can be disabled by setting WERF_TELEMETRY=0.Read 30 Sep 2026 · werf.io

Windows constraint

The Windows and Docker guide lists PowerShell, Git 2.18.0 or above, GPG, and Docker Engine as requirements.Read 30 Sep 2026 · werf.io

Where Specifiction places it

• Container Build Tools#27 of 347.3
• Kubernetes Deployment Tools#25 of 287.3