continuous-delivery
Your Kubernetes Platform is one Git commit away.
The DevOps Stack provides a standard Kubernetes Platform, bringing together automated Provisioning as Code, Continuous Application Deployment, and readily-made configurations for the best Cloud Native tools in the industry.
Make CI/CD Super Simple.
Earthly is a versatile, approachable CI/CD framework that runs every pipeline inside containers, giving you repeatable builds that you write once and run anywhere. It has a super simple, instantly recognizable syntax that is easy to write and understand – like Dockerfile and Makefile had a baby. And it leverages and augments popular build tools instead of replacing them, so you don’t have to rewrite all your builds no matter what languages you use.
Discover vulnerabilities across a codebase with CodeQL, our industry-leading semantic code analysis engine. CodeQL lets you query code as though it were data. Write a query to find all variants of a vulnerability, eradicating it forever. Then share your query to help others do the same.
Fast and powerful Git hooks manager for Node.js, Ruby or any other type of projects.
Secure your supply chain. Ship with confidence. Socket fights vulnerabilities and provides visibility, defense-in-depth, and proactive supply chain protection for JavaScript and Python dependencies.
Related contents:
The Modern Software Delivery Platform - CI, CD, Feature Flags, Cloud Costs & more.
Harness is the industry’s first Software Delivery Platform to use AI to simplify your DevOps processes - CI, CD & GitOps, Feature Flags, Cloud Costs, and much more.
The product delivery platform.
Deliver for your customers, on every commit.
Tara AI helps you maximize engineering impact and scale product delivery, so you can deliver better customer outcomes.
Progressive Delivery Operator for Kubernetes. Flagger is a progressive delivery tool that automates the release process for applications running on Kubernetes. It reduces the risk of introducing a new software version in production by gradually shifting traffic to the new version while measuring metrics and running conformance tests.
Woodpecker is a simple CI engine with great extensibility. Woodpecker is a community fork of the Drone CI system.
Trivy (pronunciation) is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more.
- Trivy @ GitHub.
- Trivy Documentation.
- Integrer la sécurité dés le départ avec Trivy @ Culture et Outils DevSecOps :fr:.
- Trivy Is Noise by Default, Here’s the Seven-Rule Filter That Catches Real Risk @ DevOpsDynamo's Medium.
- Blueprinting Security in CI/CD: Building Trust Through Open Source @ CD Foundation.
- 20 Days Later: Trivy Compromise, Act II @ Boost Security Labs.
- Trivy supply chain compromise: What Docker Hub users should know @ Docker blog.
- Trivy compromis une seconde fois : la release v0.69.4 était empoisonnée @ DevSecOps :fr:.
- When Security Scans Break the Brain: Solving Trivy’s etcd Exhaustion Problem @ aqua.
Transform your Messy CI Scripts into Clean Code. Develop Your CI/CD Pipelines as Code and Run Them Anywhere.
Powerful, programmable open source CI/CD engine that runs your pipelines in containers — pre-push on your local machine and/or post-push in CI. Dagger is a tool that lets you replace your software project's artisanal scripts with a modern API and cross-language scripting engine.
Related contents:
DevOps, Supercharged. Previews, production, and everything in between. Democratize deployments and environment creation with our dependency-aware continuous delivery platform.
check-break helps you to discover compatibility breaks between two git revisions of your code, and to improve decisions-making to determine if a new major version is required. In few words, if you follow semver (or try to stick to it), you must use check-break ;-) check-break itself follows semver and monitors its own changes. For now, it's under heavy development, use it at your own risks, compatibility breaks could happen at every moment.
The end-to-end development and testing platform for Kubernetes and Cloud
Garden is an end-to-end cloud delivery platform that accelerates your development, testing and CI/CD workflows.
Get realistic environments on demand, rapidly iterate while coding, and efficiently run tests from anywhere. One tool, one configuration, from source to finish.
Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.
Modern Open Source Build Automation.
Gradle is a build tool with a focus on build automation and support for multi-language development. If you are building, testing, publishing, and deploying software on any platform, Gradle offers a flexible model that can support the entire development lifecycle from compiling and packaging code to publishing web sites. Gradle has been designed to support build automation across multiple languages and platforms including Java, Scala, Android, Kotlin, C/C++, and Groovy, and is closely integrated with development tools and continuous integration servers including Eclipse, IntelliJ, and Jenkins.
Related contents: