function: ci-cd
424 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| open-hand/choerodon Choerodon is an open-source multi-cloud agile collaboration platform built on Kubernetes, Istio, Knative, GitLab, and Spring Cloud. It prov… | 23 | 2394 | maintenance |
| dancryer/PHPCI PHPCI is a free, open-source continuous integration server designed specifically for PHP projects, built with simplicity in mind. It clones… | 10 | 2388 | maintenance |
| dreamans/syncd Syncd is an open-source code deployment tool written in Go with a web interface for automating application releases. It supports Git reposi… | 23 | 2226 | maintenance |
| sil-org/ecs-deploy A simple shell script that initiates blue-green deployments on Amazon EC2 Container Service (ECS) by manipulating Task Definitions and Serv… | 92 | 1986 | maintenance |
| etsy/deployinator Deployinator is a deployment framework extracted from Etsy, packaged as a Ruby gem, used to orchestrate multi-stage code pushes across stac… | 10 | 1862 | maintenance |
| pivotal/LicenseFinder LicenseFinder is a Ruby CLI tool that scans a project's dependencies via its package manager, detects each package's license, and compares … | 23 | 1794 | maintenance |
| fossasia/yaydoc Yaydoc is an automated documentation generation and deployment service that builds documentation from registered GitHub repositories on eac… | 10 | 1542 | maintenance |
| bors-ng/bors-ng Bors-NG is a self-hosted GitHub bot that implements a merge queue workflow, testing batches of pull requests together on a staging branch b… | 10 | 1530 | maintenance |
| cloud66-oss/habitus Habitus is a standalone command-line build flow tool for Docker that orchestrates chained, multi-step Docker image builds defined in a buil… | 23 | 1400 | maintenance |
| sickcodes/dock-droid Dock-Droid is a Docker-based tool that runs Android x86 and Android ARM systems inside a container using QEMU with KVM acceleration. It sup… | 32 | 1376 | maintenance |
| square/cane Cane is a Ruby CLI tool that fails your build if code quality thresholds (ABC complexity, style, documentation coverage) are not met. It is… | 32 | 1305 | maintenance |
| caicloud/cyclone Cyclone is a workflow engine and end-to-end pipeline solution built entirely on native Kubernetes resources, with no extra dependencies. It… | 23 | 1065 | maintenance |
| Piplin/Piplin Piplin is an open-source, self-hosted continuous integration and deployment system built with PHP and Laravel. It automates building, testi… | 23 | 1027 | maintenance |
| microsoft/appcenter Microsoft's Visual Studio App Center, a cloud service for mobile and desktop app build, test, deploy, crash reporting, and analytics. This … | 32 | 1014 | maintenance |
| vlang/gitly Gitly is a lightweight, self-hosted GitHub/GitLab alternative written in V, distributed as a single sub-1 MB binary with compiled templates… | 74 | 1477 | experimental |
| githubocto/repo-visualizer A GitHub Action that generates an SVG diagram visualizing the file structure of a repository, with customizable colors, exclusions, and dep… | 10 | 1305 | experimental |
| gaia-pipeline/gaia Gaia is a self-hosted automation platform for building powerful pipelines in any programming language, using HashiCorp's go-plugin system a… | 10 | 5217 | abandoned |
| hashicorp/waypoint HashiCorp Waypoint is a Go-based tool that lets developers define their application build, deploy, and release lifecycle as code, with out-… | 10 | 4720 | abandoned |
| hygieia/hygieia Hygieia is a CapitalOne open-source DevOps dashboard that aggregates data from CI/CD, source control, and deployment tools into a single vi… | 10 | 3808 | abandoned |
| projectkudu/kudu Kudu is the deployment engine behind git deployments, WebJobs, and related features in Azure App Service, and can also run outside Azure. T… | 10 | 3146 | abandoned |
| microsoft/onefuzz OneFuzz is a self-hosted Fuzzing-As-A-Service platform that lets developers launch continuous fuzzing jobs from a few VMs to thousands of c… | 10 | 2824 | abandoned |
| github/janky Janky is a continuous integration server built on top of Jenkins, controlled via Hubot chat commands, and designed for GitHub repositories.… | 10 | 2743 | abandoned |
| uber-archive/makisu Makisu is a fast and flexible Docker image build tool designed for unprivileged containerized environments such as Mesos or Kubernetes. It … | 10 | 2392 | abandoned |
| rancher/rio Rio is an application deployment engine for Kubernetes that layers custom resources and a CLI on top of any standard cluster to provide con… | 10 | 2253 | abandoned |
| GoogleChromeLabs/lighthousebot A deprecated web service and Docker-based tool for running Google Lighthouse audits in CI, reporting pass/fail scores on GitHub pull reques… | 10 | 2221 | abandoned |
| vadimdemedes/trevor Trevor is a CLI tool that reads your project's .travis.yml and runs your tests locally in Docker containers across all the Node.js versions… | 23 | 2098 | abandoned |
| fastlane/ci fastlane.ci was an open-source, self-hosted, mobile-optimized continuous integration server built on top of the fastlane automation toolcha… | 10 | 2067 | abandoned |
| fabric8io/fabric8 fabric8 was an open-source integrated development platform for building and deploying microservices on Kubernetes and OpenShift, built on D… | 10 | 1749 | abandoned |
| jenkinsci/pipeline-plugin The former home of the Jenkins Pipeline (Workflow) plugin suite, which lets users define continuous delivery pipelines as code in Groovy. T… | 10 | 1687 | abandoned |
| greenkeeperio/greenkeeper Greenkeeper was a hosted service and bot that automated npm dependency updates for GitHub repositories, opening branches and pull requests … | 23 | 1612 | abandoned |
| gitlabhq/gitlab-ci GitLab CI was an open-source continuous integration server written in Ruby. It was integrated into GitLab 8.0, and this repository now only… | 10 | 1445 | abandoned |
| actions/create-release A GitHub Action written in JavaScript that wraps the GitHub Release API's Create a Release endpoint, allowing workflows to create GitHub re… | 10 | 1382 | abandoned |
| zeke/semantic-pull-requests A Probot-based GitHub App that adds a status check ensuring pull requests follow the Conventional Commits spec, so semantic-release can tri… | 32 | 1234 | abandoned |
| bamlab/generator-rn-toolbox A Yeoman generator that bootstraps and configures React Native projects with linting, Jest, Fastlane environments, CI/CD configs, and asset… | 23 | 1190 | abandoned |
| nickmerwin/node-coveralls A Node.js library that takes lcov coverage data from tools like mocha and posts it to coveralls.io for code coverage reporting. It integrat… | 50 | 1063 | abandoned |
| defunkt/cijoe CI Joe is a lightweight, fun Continuous Integration server written in Ruby that runs your project's tests on demand and reports pass/fail s… | 32 | 1047 | abandoned |
| coollabsio/coolify Coolify is an open-source, self-hostable PaaS alternative to Vercel, Heroku, Netlify, and Railway that deploys static sites, databases, ful… | 95 | 61086 | active |
| Cypress Cypress is an open-source end-to-end and component testing framework for anything that runs in a browser, built in TypeScript. It ships a t… | 99 | 51001 | stable |
| cli/cli GitHub's official command line tool (gh) that brings pull requests, issues, releases, and other GitHub features to the terminal alongside g… | 95 | 46011 | stable |
| fastapi/full-stack-fastapi-template A full-stack web application template combining a FastAPI backend with a React frontend, including SQLModel, PostgreSQL, JWT authentication… | 90 | 45181 | active |
| fastlane fastlane is an open-source Ruby-based CLI tool that automates building, code signing, screenshot generation, and releasing of iOS, macOS, a… | 98 | 42025 | stable |
| Trivy Trivy is an all-in-one open-source security scanner that finds vulnerabilities (CVEs), IaC misconfigurations, secrets, and software license… | 98 | 37636 | stable |
| vercel/turborepo Turborepo is a high-performance build system and task runner for JavaScript and TypeScript monorepos, written in Rust by Vercel. It paralle… | 95 | 31023 | stable |
| helm/helm Helm is the de facto package manager for Kubernetes, packaging pre-configured Kubernetes resources into versioned units called charts that … | 99 | 30178 | stable |
| trufflesecurity/trufflehog TruffleHog is an open-source secrets scanning tool that discovers, classifies, validates, and analyzes leaked credentials across Git reposi… | 95 | 27599 | active |
| Bazel Bazel is an open-source, fast, and scalable build and test system that supports multiple languages and platforms. It uses incremental build… | 97 | 25764 | stable |
| Pulumi Pulumi is an open-source infrastructure-as-code platform that lets you define, deploy, and manage cloud infrastructure using general-purpos… | 95 | 25612 | stable |
| promptfoo/promptfoo Promptfoo is an open-source CLI and library for evaluating and red-teaming LLM applications, prompts, agents, and RAG pipelines. It support… | 92 | 24603 | active |
| gradle/gradle Gradle is an open-source build automation tool with declarative DSLs in Kotlin and Groovy, incremental builds, build caching, and a rich pl… | 99 | 18803 | stable |
| conventional-changelog/commitlint commitlint is a CLI tool and library that lints git commit messages against the conventional commit format, with shareable npm-based config… | 98 | 18702 | active |
| keploy/keploy Keploy is a developer-centric API and integration testing platform that records real application traffic, database queries, and streaming e… | 95 | 18424 | active |
| lowlighter/metrics A metrics/infographics generator that collects stats about GitHub users, organizations, and repositories using 30+ plugins and hundreds of … | 61 | 17108 | active |
| vercel/vercel The open-source Vercel CLI and supporting packages for deploying web applications and AI agents to the Vercel cloud platform. It enables gi… | 94 | 16152 | active |
| GoogleContainerTools/skaffold Skaffold is a command-line tool from Google that automates the build, push, test, and deploy workflow for containerized Kubernetes applicat… | 97 | 15887 | active |
| lint-staged/lint-staged lint-staged is an npm CLI tool that runs arbitrary shell tasks, such as formatters and linters, against only the files staged in git. It is… | 98 | 14721 | stable |
| bytebase/bytebase Bytebase is an open-source database governance platform that acts as a control plane between users (humans and AI agents) and databases, co… | 98 | 14419 | active |
| PHP-CS-Fixer/PHP-CS-Fixer PHP CS Fixer is a command-line tool that detects and automatically fixes PHP coding standards issues. It ships with built-in rule sets (PER… | 95 | 13544 | stable |
| aws/aws-cdk The AWS Cloud Development Kit (CDK) is an open-source framework for defining cloud infrastructure in code using familiar programming langua… | 95 | 12876 | stable |
| The-PR-Agent/pr-agent PR-Agent is an open-source, AI-powered code review agent that automatically reviews pull requests, generates descriptions, suggests improve… | 96 | 12720 | active |
| google/oss-fuzz OSS-Fuzz is Google's free continuous fuzzing service for open source software, combining fuzzing engines like libFuzzer, AFL++, and Honggfu… | 77 | 12594 | active |
| hadolint/hadolint Hadolint is a smart Dockerfile linter written in Haskell that parses Dockerfiles into an AST and applies best-practice rules. It also lints… | 98 | 12378 | active |
| oblien/openship Openship is an open-source, self-hostable deployment platform with built-in CI/CD that builds, ships, routes, and TLS-terminates apps from … | 82 | 11721 | active |
| kubescape/kubescape Kubescape is an open-source Kubernetes security platform (a CNCF incubating project) offering misconfiguration scanning, vulnerability asse… | 98 | 11692 | active |
| SonarQube SonarQube is a continuous code inspection platform that performs static analysis to track code quality, security vulnerabilities, and techn… | 98 | 10928 | stable |
| cobusgreyling/loop-engineering A collection of patterns, starter templates, and npm CLI tools for 'loop engineering' — designing automated loops that prompt and orchestra… | 78 | 10687 | active |
| rolling-scopes/rsschool-app RS School App is the web application powering the Rolling Scopes School education process, helping thousands of students train as front-end… | 76 | 10367 | active |
| Untrivial-ai/agent-orchestrator Agent Orchestrator (AO) is a local desktop IDE for supervising fleets of AI coding agents like Claude Code, Codex, and Aider. It plans task… | 82 | 9968 | active |
| gruntwork-io/terragrunt Terragrunt is a flexible orchestration tool that lets Infrastructure as Code written in OpenTofu/Terraform scale, adding a configuration an… | 94 | 9808 | stable |
| runatlantis/atlantis Atlantis is a self-hosted Go application that automates Terraform workflows through pull requests. It listens for webhook events from GitHu… | 95 | 9255 | stable |
| evilmartians/lefthook Lefthook is a fast, dependency-free Git hooks manager written in Go that works with any type of project (Node.js, Ruby, Python, Go, Swift, … | 95 | 8732 | stable |
| ko-build/ko ko is a fast, simple container image builder for Go applications that runs go build locally without requiring Docker. It supports multi-pla… | 85 | 8511 | stable |
| HariSekhon/DevOps-Bash-tools A collection of 1200+ DevOps Bash scripts covering cloud platforms (AWS, GCP, Azure), Kubernetes, Docker, CI/CD systems, databases, and pac… | 67 | 8387 | active |
| PyCQA/bandit Bandit is a security-oriented static analysis tool that finds common security issues in Python code. It parses each file into an AST, runs … | 86 | 8242 | active |
| kunchenguid/no-mistakes A local git proxy CLI that intercepts pushes and runs an AI-driven validation pipeline (review, tests, docs, lint) in a disposable worktree… | 81 | 7878 | active |
| sindresorhus/np np is an interactive CLI tool that improves the npm publish workflow for JavaScript packages. It automates safety checks, version bumping, … | 96 | 7712 | active |
| gatling/gatling Gatling is an open-source, code-first load testing tool and performance engineering platform. It uses a fully asynchronous, non-blocking ar… | 77 | 6953 | stable |
| aws/aws-sam-cli AWS SAM CLI is an open-source command-line tool for building, locally testing, debugging, and deploying serverless applications defined wit… | 98 | 6732 | active |
| zizmorcore/zizmor zizmor is a static analysis tool for CI/CD configurations, primarily GitHub Actions workflows, as well as Dependabot and pre-commit configs… | 84 | 6394 | active |
| goodrain/rainbond Rainbond is an open-source, application-centric container management platform built on Kubernetes that lets teams build, deploy, and operat… | 99 | 6256 | active |
| rorkai/App-Store-Connect-CLI A fast, scriptable command-line tool written in Go for the App Store Connect API, covering TestFlight, builds, submissions, signing, metada… | 78 | 6253 | active |
| gitleaks/gitleaks Gitleaks is an open-source CLI tool for detecting secrets like passwords, API keys, and tokens in git repositories, files, directories, and… | 91 | 28965 | maintenance |
| anthropics/claude-code-security-review A GitHub Action that uses Anthropic's Claude to perform AI-powered security reviews of pull requests, analyzing code diffs for vulnerabilit… | 48 | 6093 | active |
| kuafuai/DevOpsGPT DevOpsGPT is a multi-agent system that combines LLMs with DevOps tools to convert natural language requirements into working software. It a… | 19 | 5966 | active |
| aidlearning/AidLearning-FrameWork AidLux (originally AidLearning) is an AIoT development platform that runs a native Ubuntu Linux environment with GUI, deep learning tooling… | 70 | 5797 | active |
| dependabot/dependabot-core Dependabot-Core is the Ruby library powering GitHub's Dependabot automated dependency updates. It resolves and updates dependencies across … | 95 | 5738 | active |
| snyk/cli The Snyk CLI is a command-line tool that scans projects for security vulnerabilities across open-source dependencies, application code, con… | 99 | 5649 | active |
| superplanehq/superplane SuperPlane is an open source control plane and automation engine for AI-driven engineering, orchestrating workflows across Git, LLMs, CI/CD… | 85 | 5548 | active |
| allure-framework/allure2 Allure Report is a flexible, multi-language test reporting tool that transforms test execution data into clear, interactive HTML reports. I… | 98 | 5512 | stable |
| lingodotdev/lingo.dev Lingo.dev is an open-source localization engineering toolkit that turns LLMs into stateful translation APIs, persisting glossaries, brand v… | 87 | 5407 | active |
| fluxcd/flagger Flagger is a progressive delivery Kubernetes operator that automates canary releases, A/B testing, and Blue/Green deployments by gradually … | 89 | 5395 | stable |
| apache/maven Apache Maven is the standard build automation and dependency management tool for Java projects, driven by a declarative pom.xml project obj… | 93 | 5323 | stable |
| helmfile/helmfile Helmfile is a declarative CLI tool for deploying Kubernetes Helm charts, Kustomize configs, and raw manifests as Helm releases from version… | 99 | 5181 | active |
| taubyte/tau Taubyte (tau) is an open-source, self-hosted fullstack cloud platform that lets developers and AI coding agents build, test, and ship appli… | 80 | 5131 | active |
| werf werf is a CNCF Sandbox CLI tool that implements full-cycle CI/CD for Kubernetes, integrating with your CI system to build, publish, test, a… | 94 | 4717 | stable |
| crate-ci/typos typos is a fast source code spell checker written in Rust that finds and corrects spelling mistakes in codebases. It is designed for low fa… | 94 | 4113 | active |
| opendevops-cn/opendevops CODO (opendevops) is an open-source, one-stop enterprise operations platform for managing multi-cloud and hybrid cloud environments with au… | 67 | 4101 | active |
| xcpretty/xcpretty xcpretty is a fast, flexible command-line formatter for xcodebuild output, written in Ruby and distributed as a gem. It pipes raw xcodebuil… | 38 | 4036 | stable |
| anmol098/waka-readme-stats A GitHub Action that automatically adds coding statistics (from WakaTime and GitHub commits) to your GitHub profile README. It displays met… | 76 | 3984 | active |
| DNSControl/dnscontrol DNSControl is an infrastructure-as-code tool for managing DNS zones and registrars via a JavaScript-compatible DSL. It pushes DNS records t… | 99 | 3917 | active |
| lycheeverse/lychee lychee is a fast, async, stream-based link checker written in Rust that finds broken hyperlinks and mail addresses in Markdown, HTML, reStr… | 93 | 3860 | active |