Open-source ci-cd software
419 open-source libraries, tools and applications tagged ci-cd, ranked by how closely ci-cd is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
419 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| WordPress/wordpress-develop The official Git mirror of the WordPress core development repository (synced from Subversion), containing the PHP, MySQL, and JavaScript so… | 77 | 3486 | stable |
| FairwindsOps/polaris Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration against 30+ built-in best-pract… | 97 | 3396 | active |
| SQLMesh/sqlmesh SQLMesh is a scalable data transformation framework for running and deploying SQL or Python data models, backward compatible with dbt. It p… | 95 | 3329 | active |
| open-policy-agent/conftest Conftest is a CLI utility for writing tests against structured configuration data using the Open Policy Agent Rego language. It validates f… | 98 | 3274 | active |
| yannh/kubeconform Kubeconform is a fast Kubernetes manifest validator written in Go, inspired by Kubeval. It validates YAML manifests against JSON schemas, s… | 72 | 3210 | active |
| sqitchers/sqitch Sqitch is a standalone database change management (migration) tool that tracks schema changes as native SQL scripts with a plan file and Me… | 79 | 3169 | stable |
| Chachamaru127/claude-code-harness A development harness plugin for Claude Code (and Codex CLI, Cursor, Grok) that enforces a disciplined Plan→Work→Review→Release loop with s… | 77 | 3160 | active |
| zegl/kube-score kube-score is a static code analysis tool for Kubernetes object definitions that scores manifests and Helm charts against reliability and s… | 57 | 3105 | active |
| ReportGenerator ReportGenerator is a command-line tool that converts code coverage reports from tools like coverlet, OpenCover, dotCover, Cobertura, JaCoCo… | 95 | 3097 | active |
| michaelshimeles/ralphy Ralphy is a CLI tool (npm package and bash script) that runs AI coding agents like Claude Code, Codex, OpenCode, Cursor, Qwen-Code, and Fac… | 42 | 2974 | active |
| projen/projen projen is a CLI tool and library that synthesizes project configuration files (package.json, tsconfig.json, GitHub Workflows, linting, CI/C… | 96 | 2958 | active |
| sagiegurari/cargo-make cargo-make is a Rust task runner and build tool that lets developers define and run task flows via TOML-based Makefile.toml files. It works… | 49 | 2952 | stable |
| testem/testem Testem is a JavaScript test runner that executes tests in real desktop browsers (Chrome, Firefox, Safari, Edge), Node, or custom launchers.… | 98 | 2918 | active |
| tach-org/tach Tach is a CLI tool, written in Rust, that enforces dependency rules and public interfaces between Python modules to support a modular monol… | 86 | 2827 | active |
| Promptflow Prompt flow is a suite of Python SDK, CLI, and VS Code extension tools for the end-to-end development of LLM-based AI applications, linking… | 72 | 11244 | maintenance |
| Erda Erda is an enterprise-grade cloud-native application platform built on Kubernetes that provides DevOps, microservice governance, and multi-… | 67 | 2756 | active |
| postgres-ai/database-lab-engine DBLab Engine is an open-source platform that provides instant, full-size thin clones and branching of PostgreSQL databases using ZFS copy-o… | 92 | 2720 | active |
| Pronto Pronto is a Ruby gem that runs automated code review by analyzing only the changes in a diff rather than the whole codebase. It integrates … | 72 | 2672 | active |
| FairwindsOps/pluto Pluto is a Go command-line utility from Fairwinds that detects deprecated and removed Kubernetes apiVersions in static manifests, Helm char… | 97 | 2589 | stable |
| friendlyanon/cmake-init cmake-init is an opinionated command-line tool that scaffolds modern CMake projects for executables, static/shared libraries, and header-on… | 61 | 2554 | active |
| mattzcarey/shippie Shippie is an extendable AI code-review agent that reads pull request diffs, explores the codebase with developer tools, and posts focused … | 88 | 2505 | active |
| EmbarkStudios/cargo-deny cargo-deny is a Cargo plugin (cargo subcommand) for linting Rust dependency graphs. It checks crate licenses against allow/deny lists, bans… | 94 | 2449 | active |
| learnhouse/learnhouse LearnHouse is a next-generation open-source learning management system (LMS) for creating, sharing, and selling educational content. It com… | 100 | 2404 | active |
| youlaitech/youlai-mall youlai-mall is an open-source full-stack e-commerce mall system built with Spring Boot 3, Spring Cloud & Alibaba 2022, Spring Authorization… | 38 | 2373 | active |
| jaywcjlove/github-rank A GitHub user and repository ranking site that publishes global and China leaderboards of GitHub users by followers and repositories by sta… | 99 | 2316 | active |
| wemake-services/wemake-django-template A bleeding-edge Cookiecutter template for scaffolding Django projects with a strong focus on code quality, security, and scalability. It sh… | 66 | 2275 | active |
| kuberhealthy/kuberhealthy Kuberhealthy is a Kubernetes operator that runs synthetic monitoring checks as short-lived pods, defined via HealthCheck custom resources. … | 99 | 2271 | active |
| pyscaffold/pyscaffold PyScaffold is a Python project generator that bootstraps high-quality, PyPI-ready package templates via the `putup` command. It bundles bes… | 64 | 2259 | stable |
| livecycle/preevy Preevy is an open-source CLI tool that provisions, manages, and exposes ephemeral preview environments for Docker Compose applications in t… | 55 | 2234 | active |
| SignTools SignTools is a free, self-hosted platform for signing and sideloading iOS, iPadOS, and macOS apps without needing a computer on hand. It pa… | 89 | 2223 | active |
| openstack/devstack DevStack is a set of shell scripts and utilities that quickly deploy a full OpenStack cloud from upstream git source trees on a clean Ubunt… | 75 | 2145 | active |
| oss-review-toolkit/ort The OSS Review Toolkit (ORT) is a FOSS policy automation toolkit that analyzes project dependencies, scans licenses and copyrights, checks … | 94 | 2098 | active |
| SBOM Tool Microsoft's SBOM Tool is a scalable, enterprise-ready CLI that generates SPDX 2.2 and SPDX 3.0 compatible Software Bill of Materials docume… | 77 | 2074 | active |
| Kubefirst Kubefirst is a CLI that provisions instant GitOps-based Kubernetes platforms, integrating tools like Argo CD, Atlantis, Vault, and external… | 69 | 2061 | active |
| Microcks Microcks is an open source, cloud native platform for API mocking and testing that turns OpenAPI, AsyncAPI, gRPC, GraphQL, Postman and Soap… | 94 | 2044 | active |
| ggshield ggshield is a CLI application from GitGuardian that detects over 500 types of hardcoded secrets in files, git history, and CI environments … | 98 | 2006 | active |
| pyupio/safety Safety CLI is a Python dependency vulnerability scanner that detects packages with known vulnerabilities and malicious packages in local de… | 89 | 1996 | active |
| fabric8io/docker-maven-plugin A Maven plugin for building Docker images and managing Docker containers directly from the Maven build lifecycle. It supports goals for bui… | 87 | 1931 | active |
| google-github-actions/setup-gcloud A GitHub Action that installs and configures the Google Cloud SDK (gcloud CLI) within GitHub Actions workflows. It supports version constra… | 65 | 1914 | active |
| aquaproj/aqua aqua is a declarative CLI version manager written in Go that manages tool versions per project via configuration files, with lazy installat… | 95 | 1871 | active |
| aquasecurity/tfsec tfsec is a static analysis security scanner for Terraform code that detects misconfigurations across major cloud providers using hundreds o… | 60 | 7046 | maintenance |
| athul/waka-readme A GitHub Action that fetches WakaTime coding metrics and injects weekly development statistics into your GitHub profile README. It runs on … | 50 | 1833 | active |
| Serverless-Devs/Serverless-Devs Serverless Devs is an open-source serverless developer toolchain and CLI (installed via npm as @serverless-devs/s) for managing the full li… | 60 | 1832 | active |
| moxi624/mogu_blog_v2 MoguBlog is a front-end/back-end separated blog system built on a Java microservices architecture (Spring Cloud + Spring Boot + MyBatis-Plu… | 29 | 1811 | active |
| towardsthecloud/cloudburn CloudBurn is an open-source AWS cost policy engine distributed as a CLI, SDK, and GitHub App. It runs deterministic cost rules against Terr… | 93 | 1789 | active |
| metlo-labs/metlo Metlo is an open-source API security platform that inventories API endpoints, detects malicious traffic in real time, and can automatically… | 34 | 1786 | active |
| kenn-io/roborev roborev is a Go-based continuous code review tool for AI coding agents that reviews every commit in the background via git hooks and surfac… | 79 | 1769 | active |
| graphql-hive/graphql-inspector GraphQL Inspector is a suite of tools for validating and monitoring GraphQL schemas. It diffs two schemas to flag breaking, dangerous, or n… | 99 | 1768 | stable |
| GoogleCloudPlatform/agent-starter-pack A Python package from Google Cloud Platform that provides production-ready templates for building and deploying GenAI agents on Google Clou… | 69 | 6569 | maintenance |
| murphysecurity/murphysec MurphySec CLI is an open-source software composition analysis (SCA) tool that detects vulnerable dependencies in projects from the command … | 53 | 1755 | active |
| Yelp/paasta PaaSTA is an open-source, distributed platform-as-a-service from Yelp for building, deploying, and monitoring containerized services on Kub… | 94 | 1734 | stable |
| cargo-semver-checks cargo-semver-checks is a CLI linter that scans Rust crates for semantic versioning violations by comparing a crate's public API against a p… | 95 | 1696 | active |
| kubeshop/testkube Testkube is an open testing platform that orchestrates, executes, and analyzes automated tests inside Kubernetes infrastructure using any c… | 95 | 1671 | active |
| python/pythondotorg The Django-based source code that powers the official python.org website, built with PostgreSQL, Redis, and Celery. It is maintained by the… | 77 | 1667 | active |
| gjtorikian/html-proofer HTMLProofer is a Ruby tool that validates rendered HTML files, checking for broken internal and external links, missing image alt tags, inv… | 91 | 1643 | active |
| TraceMachina/nativelink NativeLink is a high-performance remote build cache and remote execution server written in Rust, speaking the open Remote Execution API. It… | 100 | 1621 | active |
| crate-ci/cargo-release cargo-release is a Cargo subcommand that streamlines releasing Rust crates by extending `cargo publish` with validation, version bumping, t… | 97 | 1593 | stable |
| awslabs/diagram-as-code A Go-based CLI tool (awsdac) that generates AWS architecture diagrams from human-readable YAML definitions, following AWS diagram guideline… | 85 | 1585 | active |
| cpisciotta/xcbeautify xcbeautify is a fast, Swift-based formatter that beautifies xcodebuild and Swift Package Manager output with human-friendly colored logs. I… | 85 | 1548 | active |
| FOSSA CLI FOSSA CLI is a zero-configuration, language-agnostic dependency analysis tool that detects dependencies in any codebase across 20+ build sy… | 96 | 1525 | active |
| hxhb/HotPatcher HotPatcher is an Unreal Engine (UE4.21–UE5) editor plugin for managing hot update versions and packaging resource patches. It tracks asset … | 48 | 1511 | active |
| kodustech/kodus-ai Kodus (Kody) is an open-source AI code review agent that reviews pull requests on GitHub, GitLab, Bitbucket, and Azure Repos. It is model-a… | 84 | 1509 | active |
| pluralsh/plural Plural is an enterprise Kubernetes management platform that provides fleet-scale GitOps deployments, infrastructure-as-code management, and… | 93 | 1506 | active |
| dnsjia/luban LuBan is a self-hosted Kubernetes multi-cluster management and operations platform built with Go (Gin/Gorm) and Vue 3, integrating CMDB ass… | 32 | 1506 | active |
| actiontech/sqle SQLE is a self-hosted SQL quality management platform that audits, monitors, and governs SQL across its full lifecycle, from development-ti… | 98 | 1502 | active |
| invertase/melos Melos is a CLI tool for managing Dart and Flutter monorepos containing multiple packages. It automates versioning, changelog generation, an… | 68 | 1500 | active |
| mkubaczyk/helmsman Helmsman is a Helm Charts as Code tool that lets you describe the desired state of Kubernetes applications in a declarative TOML or YAML fi… | 83 | 1498 | active |
| Jwuthri/Tracely-ai Tracely is a self-hosted, trace-native CI/CD and observability platform for AI agents. It ingests agent traces over OpenTelemetry, grades t… | 58 | 1490 | active |
| ipetkov/crane Crane is a Nix library for building Cargo (Rust) projects with incremental artifact caching so dependencies are built only once. It provide… | 92 | 1478 | active |
| ossf/allstar Allstar is a GitHub App from OpenSSF that continuously monitors GitHub organizations and repositories for adherence to security best practi… | 84 | 1454 | active |
| MLOps Python Package A Python package template that provides a production-grade code base with MLOps best practices for building and deploying machine learning … | 92 | 1419 | active |
| microsoft/waza Waza is a Go CLI from Microsoft for evaluating AI agent skills through structured benchmarks. Users define test cases and validation rules … | 82 | 1413 | active |
| ifindev/fullstack-next-cloudflare A production-ready full-stack template combining Next.js 15 with Cloudflare Workers, including D1 database, R2 storage, Better Auth, and Se… | 43 | 1413 | active |
| cloudposse/atmos Atmos is an open-source CLI runtime for infrastructure that orchestrates Terraform, OpenTofu, Kubernetes, Helm, and containers through decl… | 96 | 1405 | active |
| ixrjog/opscloud4 OpsCloud4 is a self-hosted cloud operations platform built with Spring Boot that provides a bastion host with web/SSH terminals, Kubernetes… | 55 | 1388 | active |
| JoshuaKGoldberg/create-typescript-app A quickstart-friendly TypeScript project template and CLI scaffolding tool that sets up new or existing repositories with comprehensive, op… | 95 | 1386 | active |
| docker/setup-buildx-action An official GitHub Action that sets up Docker Buildx in CI workflows, creating and booting a builder using the docker-container driver. It … | 93 | 1385 | stable |
| ZupIT/horusec Horusec is an open-source SAST (static application security testing) CLI that scans a project for vulnerabilities across many languages wit… | 66 | 1342 | active |
| pullfrog/pullfrog Pullfrog is an open-source, model-agnostic GitHub bot that runs coding agents (Claude, Codex, etc.) inside your repo's GitHub Actions. It t… | 82 | 1340 | active |
| kubeshop/tracetest Tracetest is an open-source trace-based testing tool that builds integration and end-to-end tests on top of OpenTelemetry distributed trace… | 30 | 1329 | active |
| phpqa A Docker image bundling popular PHP static analysis and quality tools such as PHPStan, PHP-CS-Fixer, PHPMD, PHPCS, PHPCPD, PHPMetrics, and … | 95 | 1321 | active |
| owasp-dep-scan/dep-scan OWASP dep-scan is a security and risk audit CLI tool that scans project dependencies in local repositories and container images for known C… | 89 | 1286 | active |
| stategraph/stategraph Stategraph is a platform that replaces Terraform/OpenTofu's file-based state with a Postgres-backed dependency graph, enabling resource-lev… | 84 | 1285 | active |
| tcnksm/ghr ghr is a Go CLI tool that creates GitHub Releases and uploads build artifacts to them in parallel. It reads repository info from .git/confi… | 97 | 1263 | active |
| siliconcompiler/siliconcompiler SiliconCompiler is a modular Python-based hardware build system that automates the flow from RTL source code (Verilog, VHDL, Chisel, etc.) … | 95 | 1236 | active |
| pinact pinact is a Go CLI that pins GitHub Actions and Reusable Workflows to full commit SHAs in workflow and composite action files, adding versi… | 96 | 1231 | active |
| sbdchd/squawk Squawk is a linter for Postgres migrations and SQL that catches statements which could cause downtime, such as blocking locks or breaking s… | 95 | 1227 | active |
| cocogitto/cocogitto Cocogitto is a Rust CLI toolbox for the Conventional Commits and SemVer specifications. It helps create compliant commits, automatically bu… | 66 | 1211 | active |
| QuiiBz/sherif Sherif is an opinionated, zero-config linter for TypeScript and JavaScript monorepos, written in Rust for speed. It checks package. consist… | 82 | 1184 | active |
| Gentleman-Programming/gentleman-guardian-angel Gentleman Guardian Angel (gga) is a pure-Bash CLI tool that runs AI-powered code reviews on staged files via a git pre-commit hook, using a… | 71 | 1184 | active |
| maester365/maester Maester is a PowerShell-based test automation framework that monitors and validates the security configuration of Microsoft 365 and Entra I… | 90 | 1151 | active |
| fastforgedev/fastforge Fastforge (formerly Flutter Distributor) is an all-in-one CLI tool for building, packaging, and publishing Flutter applications across Andr… | 74 | 1146 | active |
| safedep/vet vet is an open-source CLI tool for software composition analysis that scans open-source dependencies for malicious packages and vulnerabili… | 92 | 1107 | active |
| buildpacks-community/kpack kpack is a Kubernetes-native container build service that implements Cloud Native Buildpacks to build OCI images from source code. It provi… | 86 | 1088 | active |
| cdxgen/cdxgen cdxgen is a CLI tool, library, and server that creates CycloneDX Bill of Materials (SBOM) documents from source code and container images, … | 95 | 1085 | active |
| Data Contract An open-source Python CLI for working with data contracts using the Open Data Contract Standard (ODCS). It lints contracts, connects to dat… | 91 | 1085 | active |
| pgplex/pgschema pgschema is a Go CLI tool that brings Terraform-style declarative schema migration to PostgreSQL: dump the current schema, edit the desired… | 83 | 1051 | active |
| agiwhitelist/auteur auteur is an Agent Skill (SKILL.md plus recipes and scripts) for Claude Code and other AI coding agents that directs cinematic website buil… | 72 | 1035 | active |
| rock-app/fabu.love fabu.love is a self-hosted mobile app distribution platform similar to fir.im and Pgyer, built with Vue + Element Plus on the frontend and … | 53 | 1034 | active |
| Skolaczk/next-starter A Next.js starter template (boilerplate) preconfigured with TypeScript, Tailwind CSS 4, shadcn/ui, NextAuth, Stripe, Drizzle ORM, and testi… | 79 | 1003 | active |