continuous-delivery
validate the structure of your container images.
The Container Structure Tests provide a powerful framework to validate the structure of a container image. These tests can be used to check the output of commands in an image, as well as verify metadata and contents of the filesystem.
Related contents:
Jenkins automation server.
Jenkins is the leading open-source automation server. Built with Java, it provides over 1,800 plugins to support automating virtually anything, so that humans can spend their time doing things machines cannot.
Related contents:
- Mastering Docker and Jenkins: Build Robust CI/CD Pipelines Efficiently @ Docker blog.
- GitHub Actions vs. Jenkins: Which one's right for your team? @ Buildkite.
- Jenkins’ Flexibility is its Greatest Strength and its Achilles Heel @ CloudBees.
- CI/CD in Production with Jenkins – Complete DevOps Course @ freeCodeCamp.org's YouTube.
- The Jenkins Threat Landscape @ WIZ.
- CI/CD Testing Tools Compared: the Same Pipeline in GitHub Actions, GitLab CI and Jenkins @ DAYAN ELVIS JAHUIRA PILCO's dev.to.
- Is Jenkins Dead? No, And That's Much Worse @ DevOps & AI Toolkit's YouTube.
Make CI/CD Super Simple.
Earthly is a versatile, approachable CI/CD framework that runs every pipeline inside containers, giving you repeatable builds that you write once and run anywhere. It has a super simple, instantly recognizable syntax that is easy to write and understand – like Dockerfile and Makefile had a baby. And it leverages and augments popular build tools instead of replacing them, so you don’t have to rewrite all your builds no matter what languages you use.
Secure your supply chain. Ship with confidence. Socket fights vulnerabilities and provides visibility, defense-in-depth, and proactive supply chain protection for JavaScript and Python dependencies.
Related contents:
Taskcluster is the task execution framework that supports Mozilla's continuous integration and release processes. It is a flexible, scalable open-source framework that can be used to build complex, highly customized CI systems.
Related contents:
DevOps Platform Powerful. Simple. Git server with CI/CD, kanban, and packages. Seamless integration. Unparalleled experience.
Minisign is a dead simple tool to sign files and verify signatures.
Bule-ish CD ripper.
Fully featured CD ripping program able to take out most of the tedium. Fully accurate, has advanced features most rippers don't, yet has no bloat and is cross-platform.
Doco-CD stands for Docker Compose Continuous Deployment and is a lightweight GitOps tool that automatically deploys and updates Docker Compose projects and Swarm stacks via webhooks or polling when a change is pushed to a Git repository.
The deployment tool for PHP.
The PHP deployment tool with support for popular frameworks out of the box.
Review the package artifact before it ships. pre-publish package security. Review the artifact before you publish it: diffs the built npm/PyPI package against the last published version and pins risk signals to the changed lines.
Between your last code review and the public registry sit build scripts, bundler output, and CI credentials. Drydock diffs the exact artifact against the last published version and pins every supply-chain finding to a changed line. Workflow Gate enforces the decision on a configured protected job; Stage Watchtower records an advisory npm review.
The Application Development Engine for Kubernetes Tame your developer workflow to go from Code to URL in one push.
Epinio installs into any Kubernetes cluster to bring your application from source code to deployment and allow for Developers and Operators to work better together!
Related contents:
Open Source, Self-Hostable Deployment Platform.
Push your code - builds, config, and deployment are handled automatically. Use our cloud or connect your own servers. Zero lock‑in, completely open‑source.
Open-source, self-hostable deployment platform with built-in CI/CD. Push code, ship containers, manage infrastructure — from a desktop app, web dashboard, or CLI.
The tiniest PaaS you've ever seen. piku, inspired by dokku, allows you do git push deployments to your own servers, no matter how small they are.
piku, inspired by dokku, allows you do git push deployments to your own servers, no matter how small they are.
Related contents:
Transform your Messy CI Scripts into Clean Code. Develop Your CI/CD Pipelines as Code and Run Them Anywhere.
Powerful, programmable open source CI/CD engine that runs your pipelines in containers — pre-push on your local machine and/or post-push in CI. Dagger is a tool that lets you replace your software project's artisanal scripts with a modern API and cross-language scripting engine.
Related contents:
Think EDR, but for CI/CD Pipelines. Open-source eBPF-powered runtime security sensor for GitHub Actions and GitLab CI/CD.
GitLab Runner is the open source project that is used to run your CI/CD jobs and send the results back to GitLab.
Related contents:
A service that bridges traditional pipelines and GitOps, improving deployment visibility. Includes a built-in GitOps repo updater.
Argo Watcher not only addresses the critical challenge of visibility during deployments with Argo CD Image Updater but also introduces optional built-in image updater.
It actively monitors the ArgoCD API for application changes and synchronizes the status of your image-related modifications, streamlining and potentially accelerating your deployment processes.
OPEN SOURCE ORCHESTRATION AND CORRELATION TOOL. ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.
Automate Your Application Security Orchestration And Correlation (ASOC) Using ArcherySec.
ArcherySec allow to interact with continuous integration/continuous delivery (CI/CD) toolchains to specify testing, and control the release of a given build based on results. Its include prioritization functions, enabling you to focus on the most critical vulnerabilities. ArcherySec uses popular open source tools to perform comprehensive scanning for web application and network. The developers can also utilize the tool for implementation of their DevOps CI/CD environment.
Open-Source Feature Flag Management for Enterprises.
Unleash is an open source feature management solution. It improves the workflow of your development team and leads to quicker software delivery. Unleash increases efficiency and gives teams full control of how and when they enable new functionality for end users. Unleash lets teams ship code to production in smaller releases whenever they want.
Repack docker images to optimize for pulling speed.
This tool repacks a Docker image into a smaller, more efficient version that makes it significantly faster to pull. It does this by using a few different techniques such as removing redundant data and improving compression ratios.
Webhook server for Gitlab, Github and Gitea to run arbitrary commands
Flux is a set of continuous and progressive delivery solutions for Kubernetes that are open and extensible.
Related contents:
- (Almost) Every infrastructure decision I endorse or regret after 4 years running infrastructure at a startup @ Jack's home on the web.
- Rebuilding My Talos Cluster from Bare Metal @ Nerdz.
- How to scale GitOps in the enterprise: From single cluster to fleet management @ Platform Engineering.
- Bootstrapping Flux with Terraform, the right way @ Flux.
CI/CD Security Analyzer.
RAVEN (Risk Analysis and Vulnerability Enumeration for CI/CD) is a powerful security tool designed to perform massive scans for GitHub Actions CI workflows and digest the discovered data into a Neo4j database.
A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.
Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog.
Continuous Integration & Delivery.
Semaphore CI/CD helps product teams ship software faster, with quality and security. Semaphore is an open source CI/CD platform. Self-host Semaphore on your own servers or on a cloud provider.
Related contents:
- Semaphore Goes Open Source: A New Dawn for DevOps Professionals @ DevOps.
- Best Home Lab Automation Tool: Semaphore UI @ VirtualizationHowto's YouTube.
- What Is Terraform GUI? Top 5 Visual Tools Compared @ Spacelift.
- CI/CD via agent tools: Skills, CLIs, MCP, and more with Semaphore @ Bret Fisher's YouTube.
Discover vulnerabilities across a codebase with CodeQL, our industry-leading semantic code analysis engine. CodeQL lets you query code as though it were data. Write a query to find all variants of a vulnerability, eradicating it forever. Then share your query to help others do the same.
Fast and powerful Git hooks manager for Node.js, Ruby or any other type of projects.
Continuous Deployment & Delivery Software for DevOps teams. Deploy your software to multi-cloud, hybrid, and on-premises environments with ease.
Make your complex deployments simple, reliable, and auditable with Octopus Deploy.
Related contents:
- Introducing Config as Code for Runbooks @ Octopus Deploy Blog.
- Introducing the Octopus Datadog integration @ Octopus Deploy Blog.
- Launching the Octopus MCP Server @ Octopus Deploy.
- Octopus and Elastic with OpenTelemetry @ Octopus Deploy.
- Hidden Gems in Octopus Deploy: Resources You Might Have Missed @ Octopus Deploy.
- GitOps with Octopus and Argo CD @ Octopus Deploy.
Easy and Repeatable Kubernetes Development.
Skaffold handles the workflow for building, pushing and deploying your application, allowing you to focus on what matters most: writing code.
Skaffold is a command line tool that facilitates continuous development for Kubernetes applications. You can iterate on your application source code locally then deploy to local or remote Kubernetes clusters. Skaffold handles the workflow for building, pushing and deploying your application. It also provides building blocks and describe customizations for a CI/CD pipeline.
Woodpecker is a simple CI engine with great extensibility. Woodpecker is a community fork of the Drone CI system.
The end-to-end development and testing platform for Kubernetes and Cloud
Garden is an end-to-end cloud delivery platform that accelerates your development, testing and CI/CD workflows.
Get realistic environments on demand, rapidly iterate while coding, and efficiently run tests from anywhere. One tool, one configuration, from source to finish.
🦎 a tool to build and deploy software on many servers 🦎
Related contents:
- Terraform Provider for Komodo @ GitHub.
- Komodo is a Free, OpenSource Docker Manager with Inbuilt CI/CD - Check It Out! @ Jim's Garage.
- How To: Automate version updates for your self-hosted Docker containers with Gitea, Renovate, and Komodo @ nickcunningh.am.
- Using Komodo to Run Docker Commands from a Web Interface @ Noted.
- FerretDB Was Eating My CPU: Migrating Komodo from SQLite to Postgres @ mauveRANT.
- Renovate + Komodo - Updating at Scale in a Large Homelab @ FoxxMD Blog.
Multi-Stage GitOps Continuous Promotion. Application lifecycle orchestration. Seamlessly orchestrate stage-to-stage deployments, without custom scripts or CI pipelines.
Kargo is a next-generation continuous delivery and application lifecycle orchestration platform for Kubernetes. It builds upon GitOps principles and integrates with existing technologies, like Argo CD, to streamline and automate the progressive rollout of changes across the many stages of an application's lifecycle.
Related contents:
GitOps for Docker
Deploy and manage your services with ease, directly from your Git repository.
OrcaCD is a simple GitOps tool for Docker. It allows you to deploy your applications using Git as the source of truth. With OrcaCD, you can easily manage your Docker containers and keep them in sync with your Git repository.
Kubernetes for Prod, Tilt for Dev. A toolkit for fixing the pains of microservice development. Define your dev environment as code. For microservice apps on Kubernetes.
Tilt powers microservice development and makes sure they behave! Run tilt up to work in a complete dev environment configured for your team.
Tilt automates all the steps from a code change to a new process: watching files, building container images, and bringing your environment up-to-date. Think docker build && kubectl apply or docker-compose up.
Related contents:
The product delivery platform.
Deliver for your customers, on every commit.
Tara AI helps you maximize engineering impact and scale product delivery, so you can deliver better customer outcomes.
Cache dependencies and build outputs in GitHub Actions.
Related contents:
Total visibility of your software engineering lifecycle.
Chalk™ captures metadata at build time, and can add a small 'chalk mark' (metadata) to any artifacts, so they can be identified in production. Chalk can also extract chalk marks and collect additional metadata about the operating environment when it does this.
Using Chalk, you can build a graph connecting development and production, so that devops engineers understand what is happening in the development process, and so that developers can understand what is happening in the infrastructure. With this information they can work better together.
Trivy (pronunciation) is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more.
- Trivy @ GitHub.
- Trivy Documentation.
- Integrer la sécurité dés le départ avec Trivy @ Culture et Outils DevSecOps :fr:.
- Trivy Is Noise by Default, Here’s the Seven-Rule Filter That Catches Real Risk @ DevOpsDynamo's Medium.
- Blueprinting Security in CI/CD: Building Trust Through Open Source @ CD Foundation.
- 20 Days Later: Trivy Compromise, Act II @ Boost Security Labs.
- Trivy supply chain compromise: What Docker Hub users should know @ Docker blog.
- Trivy compromis une seconde fois : la release v0.69.4 était empoisonnée @ DevSecOps :fr:.
- When Security Scans Break the Brain: Solving Trivy’s etcd Exhaustion Problem @ aqua.
Sample Go app repo with test and release pipelines optimized for software supply chain security (S3C).
Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko generative SBOM, cosign attestation, and SLSA build provenance
the continuous thing-doer.
Concourse is an automation system written in Go. It is most commonly used for CI/CD, and is built to scale to any kind of automation pipeline, from simple to complex.
Concourse is very opinionated about a few things: idempotency, immutability, declarative config, stateless workers, and reproducible builds.
Doco-CD stands for Docker Compose Continuous Deployment and is a lightweight GitOps tool that automatically deploys and updates Docker Compose projects and Swarm stacks via webhooks or polling when a change is pushed to a Git repository.
You can think of it as a simple Portainer or ArgoCD alternative for Docker.
Smart automation for DevOps teams and CI/CD pipelines. The AKEless Build System for C#/.NET.
Colmena is a simple, stateless NixOS deployment tool modeled after NixOps and morph, written in Rust. It's a thin wrapper over Nix commands like nix-instantiate and nix-copy-closure, and supports parallel deployment.
Make shipping applications more enjoyable.
KubeVela is a modern software delivery platform that makes deploying and operating applications across today's hybrid, multi-cloud environments easier, faster and more reliable.
Modern Open Source Build Automation.
Gradle is a build tool with a focus on build automation and support for multi-language development. If you are building, testing, publishing, and deploying software on any platform, Gradle offers a flexible model that can support the entire development lifecycle from compiling and packaging code to publishing web sites. Gradle has been designed to support build automation across multiple languages and platforms including Java, Scala, Android, Kotlin, C/C++, and Groovy, and is closely integrated with development tools and continuous integration servers including Eclipse, IntelliJ, and Jenkins.
Related contents:
Dockerfile linter, validate inline bash, written in Haskell.
A smarter Dockerfile linter that helps you build best practice Docker images. The linter parses the Dockerfile into an AST and performs rules on top of the AST. It stands on the shoulders of ShellCheck to lint the Bash code inside RUN instructions.
CI/CD for every forge.
Crow runs your pipelines in Docker, Podman or Kubernetes, in throwaway Windows and macOS VMs, or on the host, for repositories on GitHub, GitLab, Forgejo, Gitea and Bitbucket.
Progressive Delivery Operator for Kubernetes. Flagger is a progressive delivery tool that automates the release process for applications running on Kubernetes. It reduces the risk of introducing a new software version in production by gradually shifting traffic to the new version while measuring metrics and running conformance tests.
The fast lane for your PRs.
Trunk is a developer experience (DevEx) platform that enables you to ship code quickly while maintaining the necessary guardrails for excellent eng teams. Use Trunk to check, test, merge, and monitor your code.
CI/CD orchestrator for Terraform.
Open Source Terraform Orchestration for Teams. Automation, Collaboration and Governance for Terraform within your CI/CD system.
Digger is an open source IaC orchestration tool. Digger allows you to run IaC in your existing CI pipeline
Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.
Multi-cloud continuous delivery for the enterprise.
Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.
Spinnaker provides application management and deployment to help you release software changes with high velocity and confidence. Spinnaker is an open-source, multi-cloud continuous delivery platform that combines a powerful and flexible pipeline management system with integrations to the major cloud providers. If you are looking to standardize your release processes and improve quality, Spinnaker is for you.
Reloader can watch changes in ConfigMap and Secret and do rolling upgrades on Pods with their associated DeploymentConfigs, Deployments, Daemonsets Statefulsets and Rollouts.
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig.
DevOps, Supercharged. Previews, production, and everything in between. Democratize deployments and environment creation with our dependency-aware continuous delivery platform.
A fully functional local cloud stack. Develop and test your cloud and serverless apps offline!
LocalStack is an easy-to-use test/mocking framework for developing cloud applications. Using LocalStack, you can spin up a local test environment in seconds, and get the same functionality you would get from a real AWS environment.
Your Kubernetes Platform is one Git commit away.
The DevOps Stack provides a standard Kubernetes Platform, bringing together automated Provisioning as Code, Continuous Application Deployment, and readily-made configurations for the best Cloud Native tools in the industry.
Universal Artifact Repository Manager.
Definitive artifact management for flexible development and trusted delivery at any scale.
JFrog Artifactory is the single solution for housing and managing all the artifacts, binaries, packages, files, containers, and components for use throughout your software supply chain. JFrog Artifactory serves as your central hub for DevOps, integrating with your tools and processes to improve automation, increase integrity, and incorporate best practices along the way.