continuous-integration
A performant type-checker for Python 3.
Pyre is a performant type checker for Python compliant with PEP 484. Pyre can analyze codebases with millions of lines of code incrementally – providing instantaneous feedback to developers as they write code. You can try it out on examples in the Pyre Playground.
Related contents:
Smart automation for DevOps teams and CI/CD pipelines. The AKEless Build System for C#/.NET.
The Continuous Merge Platform.
Save time and CI costs while making code merging more secure and less frustrating for developers.
TwigStan is a static analyzer for Twig templates powered by PHPStan.
TwigStan uses Twig to compile templates to PHP code. It then optimizes the compiled PHP code slightly, allowing PHPStan to analyze it better. It then reports any errors back to the original template and line number.
A framework to secure the integrity of software supply chains.
in-toto is designed to ensure the integrity of a software product from initiation to end-user installation. It does so by making it transparent to the user what steps were performed, by whom and in what order.
Related contents:
Zuul is an open source CI tool.
Zuul is a project gating system. Keep your builds evergreen by automatically merging changes only if they pass tests.
Related contents:
The Open-Source Static Analysis Toolkit.
Write SAST checkers with Globstar and run them in your CI with a single binary. It's fast, easy to write, and MIT-licensed. Globstar is a fast, feature-rich, and open-source static analysis toolkit for writing and running code checkers. Based on tree-sitter.
Build Analyzer. Analyzer for Rspack & webpack.
Visualize the building process.
Rsdoctor is a build analyzer tailored for the Rspack ecosystem and fully compatible with the webpack ecosystem.
Rsdoctor is committed to being a one-stop, intelligent build analyzer that makes the build process transparent, predictable, and optimizable through visualization and smart analysis, helping development teams precisely identify bottlenecks, optimize performance, and improve engineering quality.
Automated Way to Instantly Upgrade and Refactor any PHP code.
Rector instantly upgrades and refactors the PHP code of your application.
Related contents:
The Oxidized PHP Toolchain. A blazing fast linter, formatter, and static analyzer for PHP, written in Rust.
Mago is a toolchain for PHP that aims to provide a set of tools to help developers write better code.
Related contents:
📦🚀 Fully automated version management and package publishing.
semantic-release automates the whole package release workflow including: determining the next version number, generating the release notes, and publishing the package.
Open source AI. Code Reviews and Docs. Customizable LLM-enabled workflows to automate reviews, docs and patches.
Patchwork automates development gruntwork like PR reviews, bug fixing, security patching, and more using a self-hosted CLI agent and your preferred LLMs. Try the hosted version here.
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration with ASPM/VM platforms and in CI environments.
Robot Framework is an open source automation framework for test automation and robotic process automation (RPA). It is supported by the Robot Framework Foundation and widely used in the industry.
Its human-friendly and versatile syntax uses keywords and supports extending through libraries in Python, Java, and other languages.
It integrates with other tools for comprehensive automation without licensing fees, bolstered by a rich community with hundreds of 3rd party libraries.
Jenkins automation server.
Jenkins is the leading open-source automation server. Built with Java, it provides over 1,800 plugins to support automating virtually anything, so that humans can spend their time doing things machines cannot.
Related contents:
- Mastering Docker and Jenkins: Build Robust CI/CD Pipelines Efficiently @ Docker blog.
- GitHub Actions vs. Jenkins: Which one's right for your team? @ Buildkite.
- Jenkins’ Flexibility is its Greatest Strength and its Achilles Heel @ CloudBees.
- CI/CD in Production with Jenkins – Complete DevOps Course @ freeCodeCamp.org's YouTube.
- The Jenkins Threat Landscape @ WIZ.
- CI/CD Testing Tools Compared: the Same Pipeline in GitHub Actions, GitLab CI and Jenkins @ DAYAN ELVIS JAHUIRA PILCO's dev.to.
- Is Jenkins Dead? No, And That's Much Worse @ DevOps & AI Toolkit's YouTube.
Here at Pa11y, we think making the web more accessible improves it for everyone. So we publish a range of free and open source tools to help designers and developers make their web pages more accessible.
validate the structure of your container images.
The Container Structure Tests provide a powerful framework to validate the structure of a container image. These tests can be used to check the output of commands in an image, as well as verify metadata and contents of the filesystem.
Related contents:
Continuous Integration & Delivery.
Semaphore CI/CD helps product teams ship software faster, with quality and security. Semaphore is an open source CI/CD platform. Self-host Semaphore on your own servers or on a cloud provider.
Related contents:
- Semaphore Goes Open Source: A New Dawn for DevOps Professionals @ DevOps.
- Best Home Lab Automation Tool: Semaphore UI @ VirtualizationHowto's YouTube.
- What Is Terraform GUI? Top 5 Visual Tools Compared @ Spacelift.
- CI/CD via agent tools: Skills, CLIs, MCP, and more with Semaphore @ Bret Fisher's YouTube.
the continuous thing-doer.
Concourse is an automation system written in Go. It is most commonly used for CI/CD, and is built to scale to any kind of automation pipeline, from simple to complex.
Concourse is very opinionated about a few things: idempotency, immutability, declarative config, stateless workers, and reproducible builds.
Count your code, quickly.
Tokei is a program that displays statistics about your code. Tokei will show the number of files, total lines within those files and code, comments, and blanks grouped by language.
OpenChoreo is an open-source internal developer platform (IDP)
OpenChoreo is a complete, open-source Internal Developer Platform (IDP) designed for platform engineering (PE) teams who want to streamline developer workflows and deliver Internal Developer Portals without having to build everything from scratch. OpenChoreo orchestrates many CNCF and other projects to give a comprehensive framework for PE teams to build the platform they want.
Related contents:
DevOps, Supercharged. Previews, production, and everything in between. Democratize deployments and environment creation with our dependency-aware continuous delivery platform.
Ruby production code coverage collection and reporting (line of code usage). A gem to measure production code usage, showing a counter for the number of times each line of code that is executed. Coverband allows easy configuration to collect and report on production code usage. It reports in the background via a thread or can be used as Rack middleware, or manually configured to meet any need.
Cut Your GitHub Actions Bill by 90%.
Self-hosted GitHub Actions runners made simple. For AWS. 10x cheaper, 30% faster, and unlimited caching. Best alternative to Actions Runner Controller.
RunsOn is the modern way to run self-hosted GitHub Actions runners of any size, at the cheapest price available. Think of it as your best alternative to the Actions Runner Controller (ARC) for Kubernetes, the Philips terraform module, or any of the third party providers that require deep access to your code and secrets.
PHP Benchmarking framework.
PHPBench is a benchmark runner for PHP analogous to PHPUnit but for performance rather than correctness.
The Ruby Linter/Formatter that Serves and Protects.
RuboCop is a Ruby code style checker (linter) and formatter based on the community-driven Ruby Style Guide.
Related contents:
GitHub App for triggering Cilium CI workflows.
GitHub App for triggering workflows based on trigger phrases found in PR comments, and marking desired workflows successful in merge groups, to be used for Cilium CI.
Related contents:
Continuous Integration for Github and Bitbucket that monitors your code for bugs
Your Kubernetes Platform is one Git commit away.
The DevOps Stack provides a standard Kubernetes Platform, bringing together automated Provisioning as Code, Continuous Application Deployment, and readily-made configurations for the best Cloud Native tools in the industry.
Automate running Lighthouse for every commit, viewing the changes, and preventing regressions. Lighthouse CI is a suite of tools that make continuously running, saving, retrieving, and asserting against Lighthouse results as easy as possible.
the nix CI.
Click. Push. Done. Just install the garnix GitHub App, and push a flake.nix file to your repo. We’ll handle the rest, from building your software and running your tests, to provisioning and deploying your servers.
Related contents:
A vulnerability scanner for container images and filesystems.
Related contents:
Woodpecker is a simple CI engine with great extensibility. Woodpecker is a community fork of the Drone CI system.
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language. reviewdog provides a way to post review comments to code hosting service, such as GitHub, automatically by integrating with any linter tools with ease. It uses an output of lint tools and posts them as a comment if findings are in diff of patches to review.
Build High-Quality Software with AI‑Powered Testing.
Empowering your testing journey with precision and efficiency. Our AI-augmented tools ensure not just excellence but also the ability to deliver high-quality software at scale.
Declarative CLI Version Manager. Unify tool versions in teams, projects, and CI. Easy, painless, and secure.
Declarative CLI Version manager written in Go. Support Lazy Install, Registry, and continuous update with Renovate. CLI version is switched seamlessly
Automate the creation of merge proposals for scriptable changes.
Silver-Platter makes it possible to contribute automatable changes to source code in a version control system. It automatically creates a local checkout of a remote repository, makes user-specified changes, publishes those changes on the remote hosting site and then creates a pull request.
In addition to that, it can also perform basic maintenance on branches that have been proposed for merging - such as restarting them if they have conflicts due to upstream changes.
Fearless refactoring, it does a lot of smart checks to find certain errors.
Continuously update everything. A Declarative Update Policy Engine.
"Automatically open a PR on your GitOps repository when a third party service publishes an update"
Updatecli is a tool used to apply file update strategies. Designed to be used from everywhere, each application "run" detects if a value needs to be updated using a custom strategy then apply changes according to the strategy.
You describe your update strategy in a file then you run updatecli to it.
Related contents:
The end-to-end development and testing platform for Kubernetes and Cloud
Garden is an end-to-end cloud delivery platform that accelerates your development, testing and CI/CD workflows.
Get realistic environments on demand, rapidly iterate while coding, and efficiently run tests from anywhere. One tool, one configuration, from source to finish.
Test Coverage History & Statistics Coveralls works with your continuous integration server to give you test coverage history and statistics. Free for open source, pro accounts for private repos, instant sign up with GitHub OAuth. We help you deliver code confidently by showing which parts of your code aren’t covered by your test suite. Free for open source repos. Pro accounts for private repos. Instant sign up through GitHub, Bitbucket, and Gitlab.
A specification for adding human and machine readable meaning to commit messages.
Related contents:
scissors Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
CI/CD Security Analyzer.
RAVEN (Risk Analysis and Vulnerability Enumeration for CI/CD) is a powerful security tool designed to perform massive scans for GitHub Actions CI workflows and digest the discovered data into a Neo4j database.
Load testing designed for DevOps and CI/CD.
Gatling is a highly capable load testing tool. It is designed for ease of use, maintainability and high performance.
Out of the box, Gatling comes with excellent support of the HTTP protocol that makes it a tool of choice for load testing any HTTP server. As the core engine is actually protocol agnostic, it is perfectly possible to implement support for other protocols. For example, Gatling currently also ships JMS support.
trigger async analysis from your Gitlab CI and expose badges.
Gitlab CI triggers asynchone REST analysis and display badges and files.
Related contents:
Cache dependencies and build outputs in GitHub Actions.
Related contents:
Free Hosted Continuous Integration Platform for the Open Source Community
JavaScript Web Testing and Component Testing Framework. Test. Automate. Accelerate.
With Cypress, you can easily create tests for your modern web applications, debug them visually, and automatically run them in your continuous integration builds.
Lfi Scan Tool.
LFI Space is a robust and efficient tool designed to detect Local File Inclusion (LFI) vulnerabilities in web applications. This tool simplifies the process of identifying potential security flaws by leveraging two distinct scanning methods: Google Dork Search and Targeted URL Scan. With its comprehensive approach, LFI Space assists security professionals, penetration testers, and ethical hackers in assessing the security posture of web applications.
Gitleaks is a fast, light-weight, portable, and open-source secret scanner for git repositories, files, and directories.
Related contents:
Think EDR, but for CI/CD Pipelines. Open-source eBPF-powered runtime security sensor for GitHub Actions and GitLab CI/CD.
Test and enforce architectural rules in your Laravel applications. Keep your app's architecture clean and consistent!
Laravel Arkitect lets you test and enforce your architectural rules in your Laravel applications, and it's a PHPArkitect wrapper for Laravel. This package helps you to keep your app's architecture clean and consistent.
Build professional pipelines in minutes.
The goal of this project is to make building a professional CI/CD pipeline as easy as including a couple of GitLab CI templates in your .gitlab-ci.yml file.
Related contents:
Automatic image compression. Relax while Imgbot optimizes your images Don’t spend another second worrying about compressing your images. Install Imgbot into your GitHub projects, and focus on your application.
A framework for securing software update systems.
The Update Framework (TUF) maintains the security of software update systems, providing protection even against attackers that compromise the repository or signing keys. TUF provides a flexible framework and specification that developers can adopt into any software update system.
Related contents: