continuous-integration
continuous fuzzing for open source software. Fuzz testing is a well-known technique for uncovering programming errors in software. Many of these detectable errors, like buffer overflow, can have serious security implications. Google has found thousands of security vulnerabilities and stability bugs by deploying guided in-process fuzzing of Chrome components, and we now want to share that service with the open source community.
🐶 Automated code review tool integrated with any code analysis tools regardless of programming language. reviewdog provides a way to post review comments to code hosting service, such as GitHub, automatically by integrating with any linter tools with ease. It uses an output of lint tools and posts them as a comment if findings are in diff of patches to review.
A specification for adding human and machine readable meaning to commit messages.
Related contents:
Woodpecker is a simple CI engine with great extensibility. Woodpecker is a community fork of the Drone CI system.
A distributed vulnerability database for Open Source. An open, precise, and distributed approach to producing and consuming vulnerability information for open source.
Related contents:
Automatic image compression. Relax while Imgbot optimizes your images Don’t spend another second worrying about compressing your images. Install Imgbot into your GitHub projects, and focus on your application.
Find & Fix Open Source vulnerabilities. Get real-time security alerts and compliance issues on your open source dependencies within Azure DevOps or GitHub.
Transform your Messy CI Scripts into Clean Code. Develop Your CI/CD Pipelines as Code and Run Them Anywhere.
Powerful, programmable open source CI/CD engine that runs your pipelines in containers — pre-push on your local machine and/or post-push in CI. Dagger is a tool that lets you replace your software project's artisanal scripts with a modern API and cross-language scripting engine.
Related contents:
Bring visibility to your codebase. CodeSee helps you understand, build and refactor applications without guesswork. Instantly map and automate your app’s services, directories, file dependencies and code changes.
DevOps, Supercharged. Previews, production, and everything in between. Democratize deployments and environment creation with our dependency-aware continuous delivery platform.
Automate Software Build and Testing. Drone is a self-service Continuous Integration platform for busy development teams.
check-break helps you to discover compatibility breaks between two git revisions of your code, and to improve decisions-making to determine if a new major version is required. In few words, if you follow semver (or try to stick to it), you must use check-break ;-) check-break itself follows semver and monitors its own changes. For now, it's under heavy development, use it at your own risks, compatibility breaks could happen at every moment.
Ruby production code coverage collection and reporting (line of code usage). A gem to measure production code usage, showing a counter for the number of times each line of code that is executed. Coverband allows easy configuration to collect and report on production code usage. It reports in the background via a thread or can be used as Rack middleware, or manually configured to meet any need.
Automate running Lighthouse for every commit, viewing the changes, and preventing regressions. Lighthouse CI is a suite of tools that make continuously running, saving, retrieving, and asserting against Lighthouse results as easy as possible.
Code coverage tool for Bash. Bashcov is a code coverage analysis tool for Bash. In most cases, you'll want overall coverage results for your project from shUnit2, Bats, bash_unit, assert.sh, bashaspec, etc. Bashcov automatically takes care of this by caching and merging results when generating reports, so your report includes coverage across your test suites and thereby gives you a better picture of blank spots. It uses the SimpleCov coverage library to generate HTML reports. SimpleCov gets installed automatically when you install Bashcov.
The end-to-end development and testing platform for Kubernetes and Cloud
Garden is an end-to-end cloud delivery platform that accelerates your development, testing and CI/CD workflows.
Get realistic environments on demand, rapidly iterate while coding, and efficiently run tests from anywhere. One tool, one configuration, from source to finish.
Your teammate for Code Quality and Code Security SonarQube empowers all developers to write cleaner and safer code. Join an Open Community of more than 200k dev teams.
a fast, scalable, multi-language and extensible build system. Build and test software of any size, quickly and reliably. Bazel is a free software tool for the automation of building and testing of software.
Related contents:
- Adopting Bazel for Web at Scale @ The Airbnb Tech Blog's Medium.
- Optimiser les temps de build avec Bazel et Buildfarm @ Vincent Composieux :fr:.
- (Almost) Every infrastructure decision I endorse or regret after 4 years running infrastructure at a startup @ Jack's home on the web.
- Bazel's Original Sins @ Farid Zakaria's Blog.
- Trusting builds with Bazel remote execution @ Blog System/5.
- Top 5 Monorepo Tools for 2025 @ aviator.
- You are holding BUILD files wrong @ Blog System/5.
Continuous Integration for Github and Bitbucket that monitors your code for bugs
Test Coverage History & Statistics Coveralls works with your continuous integration server to give you test coverage history and statistics. Free for open source, pro accounts for private repos, instant sign up with GitHub OAuth. We help you deliver code confidently by showing which parts of your code aren’t covered by your test suite. Free for open source repos. Pro accounts for private repos. Instant sign up through GitHub, Bitbucket, and Gitlab.
Free Hosted Continuous Integration Platform for the Open Source Community
Tuleap is a free and Open Source Suite to improve management of software projects and connect with team members. With a single web-based solution, CTO, project managers, developers, quality managers and other users can easily build, deploy smart and quality projects.
Tuleap provides tools for managing projects, tasks, changes, defects, documents as well as version control, continuous integration and social collaboration.