Werf

aid: werf
deliveryModel:
  model: self-hosted
  license: Apache-2.0
  open_source: true
  commercial: false
  callable_host: false
  label: Self-hosted open source · you run it yourself
  confidence: high
  source:
  - license
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source: []
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/werf.png
name: Werf
description: Werf is an open-source CNCF sandbox project providing a complete GitOps-based CI/CD solution for Kubernetes.
  It implements the full application delivery lifecycle — building images, managing dependencies, deploying Helm charts, and
  cleaning up container registries — using Git as the single source of truth (Giterminism). Werf integrates natively with
  all major CI systems, Buildah, Helm, and Kubernetes.
type: Index
url: https://werf.io/
tags:
- CI/CD
- Deployment
- DevOps
- GitOps
- Kubernetes
- CNCF
- Helm
- Containers
- Open-Source
tags_raw:
- CI/CD
- Deployment
- DevOps
- GitOps
- Kubernetes
- CNCF
- Helm
- Containers
- Open Source
created: '2025'
modified: '2026-05-03'
specificationVersion: '0.23'
apis: []
common:
- type: IssueTracker
  url: https://github.com/werf/werf/issues
- type: SecurityPolicy
  url: https://github.com/werf/werf/blob/main/SECURITY.md
- type: CodeOfConduct
  url: https://github.com/werf/werf/blob/main/CODE_OF_CONDUCT.md
- type: ContributionGuide
  url: https://github.com/werf/werf/blob/main/CONTRIBUTING.md
- type: License
  name: Apache-2.0
  url: https://github.com/werf/werf/blob/main/LICENSE
- type: DomainSecurity
  url: security/werf-domain-security.yml
- type: Website
  url: https://werf.io/
- type: Documentation
  url: https://werf.io/docs/v2/
- type: GettingStarted
  url: https://werf.io/getting_started/
- type: GitHubOrganization
  url: https://github.com/werf
- type: GitHubRepository
  url: https://github.com/werf/werf
- type: CLI
  url: https://github.com/werf/werf
  title: Werf CLI
- type: GitHubRepository
  url: https://github.com/werf/nelm
  title: Nelm (Helm 4 Alternative)
- type: GitHubRepository
  url: https://github.com/werf/kubedog
  title: Kubedog Kubernetes Watch Library
- type: GitHubRepository
  url: https://github.com/werf/trdl
  title: TRDL Secure Software Delivery
- type: GitHubRepository
  url: https://github.com/werf/actions
  title: GitHub Actions Integration
- type: GitHubRepository
  url: https://github.com/werf/nelm-chart-ts-sdk
  title: Nelm Chart TypeScript SDK
- type: ChangeLog
  url: https://github.com/werf/werf/releases
- type: Support
  url: https://github.com/werf/werf/discussions
- type: Features
  data:
  - name: Giterminism
    description: Uses Git as the single source of truth, ensuring all CI/CD configurations are reproducible and auditable
      from version control.
  - name: Incremental Builds
    description: Rebuilds only modified components and reuses existing container registry layers, dramatically reducing build
      times.
  - name: Kubernetes Deployment
    description: Manages Helm chart deployments to Kubernetes with built-in rollback, planning, and drift detection (werf
      converge, werf plan, werf rollback).
  - name: Container Registry Cleanup
    description: Automatically cleans up stale images from container registries using Git history-aware policies (werf cleanup,
      werf purge).
  - name: Helm Integration
    description: Full Helm chart management including rendering, linting, bundling, and deploying with werf helm command suite.
  - name: Multi-CI Support
    description: Native integration with GitHub Actions, GitLab CI, CircleCI, Jenkins, and other CI systems via werf ci-env.
  - name: Secure Software Delivery
    description: TRDL component provides TUF-based secure software update distribution with GPG signature verification.
- type: UseCases
  data:
  - name: Kubernetes Application Delivery
    description: Build, test, and deploy containerized applications to Kubernetes clusters using GitOps principles.
  - name: Monorepo CI/CD
    description: Manage CI/CD pipelines for monorepo projects with independent image tagging and selective component redeployment.
  - name: Helm Chart Management
    description: Package, bundle, and deploy Helm charts with integrated dependency management and Kubernetes compatibility
      checks.
  - name: Container Registry Management
    description: Automate container image lifecycle from build to cleanup using content-based tagging and Git-aware retention
      policies.
  - name: Secure Software Distribution
    description: Distribute software updates securely using TUF framework with TRDL, ensuring integrity and authenticity of
      delivered artifacts.
- type: Integrations
  data:
  - name: GitHub Actions
    description: Native GitHub Actions for incorporating werf into GitHub-hosted CI/CD pipelines.
  - name: GitLab CI
    description: First-class support for GitLab CI/CD environment variables and pipeline integration.
  - name: Helm
    description: Deep integration with Helm package manager for Kubernetes, extending it with werf-specific deployment guarantees.
  - name: Buildah
    description: Uses Buildah for rootless, daemonless OCI image builds without requiring Docker.
  - name: Kubernetes
    description: Direct integration with Kubernetes API for deploying, monitoring, and managing application resources.
  - name: OCI Registries
    description: Compatible with all OCI-compliant container registries including Docker Hub, GHCR, GitLab Registry, and cloud
      registries.
  - name: CNCF Ecosystem
    description: CNCF Sandbox project integrating with the broader cloud-native ecosystem including Flux CD and other CNCF
      tools.
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com