CI/CD Tools

Run GitHub Actions locally for fast feedback

Act is an open-source tool that runs GitHub Actions workflows locally using Docker containers that match GitHub's execution environment. It provides instant feedback on workflow changes without pushing to a repository, supports matrix builds, secret management, and artifact handling. Act can also replace Makefiles by using workflow files as task definitions, making it useful for both CI/CD development and local task automation across development teams.

Declarative GitOps continuous delivery tool for Kubernetes.

Argo CD is the most popular GitOps continuous delivery tool for Kubernetes. It continuously monitors Git repositories and automatically syncs application state to match the desired configuration. A CNCF graduated project used by thousands of organizations for deploying to Kubernetes clusters.

Run GitHub Actions on faster bare-metal runners with lower Ubuntu per-minute pricing

Blacksmith is a drop-in replacement for GitHub-hosted runners that executes Actions on bare-metal gaming CPUs and source-shaped cache infrastructure. Migration requires a one-line YAML change. Features include colocated warm caches, persistent Docker layer caching on NVMe, CI observability with log search, and Firecracker microVM isolation. SOC 2 Type 2 certified, with Ubuntu x64 pricing at $0.004/min and 3,000 free minutes/month.

Official MCP server for GitHub repo operations

GitHub MCP Server is the official Model Context Protocol server from GitHub that connects AI assistants to repositories, issues, pull requests, workflows, and code search. It exposes 100+ operations with toolset filtering, permission scoping, and audit logging, available in both remote-hosted and self-hosted Docker deployment modes.

Hybrid CI/CD platform with self-hosted agents and cloud orchestration

Buildkite is a hybrid CI/CD platform that separates orchestration from execution. Its SaaS control plane manages pipelines, UI, authentication, and coordination while agents run builds on self-hosted or hosted infrastructure. Current pricing lists Personal at $0, Pro at $30 USD per active user/mo, P95 billing for self-hosted agents, Test Engine, Package Registries, and hosted Mac/Linux agent options.

Merge queue, CI insights, flaky-test controls, and stacked pull requests for GitHub teams

Mergify is a pull request automation platform that keeps main branches green with merge queue batching, merge protections, CI Insights, flaky-test detection, and stacked pull requests. Its Stacks workflow turns commits on one local branch into focused PR chains, helping teams review large AI-generated or feature-heavy changes without losing queue safety.

Infrastructure as Code using real programming languages — TypeScript, Python, Go, C#, Java.

Pulumi is a modern Infrastructure as Code platform that lets teams define cloud infrastructure using familiar programming languages instead of DSLs. Supports TypeScript, Python, Go, C#, Java, and YAML across major clouds, Kubernetes, and a broad Pulumi Registry with Terraform-derived provider coverage. Offers testing, IDE autocomplete, reusable components, and Pulumi Cloud state/governance features.

Automate your workflow from GitHub

GitHub's built-in CI/CD and workflow automation platform that runs directly in your repository. Define workflows in YAML triggered by Git events (push, PR, release), schedules, or manual dispatch. Massive marketplace of 20,000+ community-maintained actions for testing, building, deploying, and automating tasks. Supports matrix builds, caching, secrets, environments with approval gates, and self-hosted runners. Free for public repos with generous minutes for private repos.

AI-powered API testing with traffic recording

Keploy is an open-source AI-powered testing platform that generates API, integration, and unit tests by recording real network traffic via eBPF. It captures API calls, database queries, and streaming events, then replays them as deterministic tests with auto-generated mocks — no code changes needed. Works across any language or framework with CI/CD pipeline integration and popular testing framework support including JUnit, PyTest, Jest, and Go-Test.

Open-source Terraform fork — community-driven Infrastructure as Code.

OpenTofu is an open-source fork of Terraform created by the Linux Foundation after HashiCorp switched Terraform to the BSL license. Designed to preserve existing Terraform workflows and configurations, it offers state encryption, early variable evaluation, and a community-driven development model. Backed by major cloud providers and companies.

Terraform pull request automation via GitHub/GitLab comments

Atlantis is a self-hosted Terraform pull request automation tool that runs plan and apply operations triggered by GitHub, GitLab, Bitbucket, or Azure DevOps comments. Type 'atlantis plan' on a PR to see infrastructure changes, then 'atlantis apply' to deploy. 9,100+ GitHub stars, Apache 2.0 licensed. Widely adopted as the standard for GitOps-style Terraform workflows, with locking to prevent concurrent modifications to the same resources.

Continuous integration and delivery

Cloud CI/CD platform known for speed and Docker-first workflows. Offers parallelism, intelligent caching, and orbs (reusable configuration packages) for common tasks. Used by Spotify, Samsung, and Ford. Strong at complex build pipelines with conditional logic, matrix builds, and granular resource allocation that help large teams optimize their build times.

The open-source automation server

Open-source automation server for building, testing, and deploying software. Jenkins is the de facto self-hosted CI/CD platform with thousands of plugins for source control, build tools, cloud providers, and notifications. Pipelines are defined as Groovy code (Jenkinsfile) and run on distributed agents. Battle-tested in enterprise environments since 2011 — the reference implementation for self-managed CI before SaaS alternatives existed.

Visual regression testing for CI/CD pipelines

Argos CI is a visual regression testing platform that automatically catches unintended UI changes in CI/CD pipelines. It integrates with Playwright, Cypress, Storybook, and Puppeteer, featuring a stabilization engine that filters flaky pixel differences from genuine regressions. Used by teams at Meta and MUI for frontend quality gates.

Pipelineless AppSec for AI-driven development

Arnica is a pipelineless application security platform that scans every code push in real-time across SAST, SCA, IaC, secrets, and license risks without CI/CD pipeline integration. Its Arnie AI engine combines deterministic static analysis with multi-agent reasoning to detect logic flaws and vulnerabilities in both human-written and AI-generated code. It integrates directly with GitHub, GitLab, Bitbucket, and Azure DevOps for 100% repository coverage from day one.

Developer productivity platform with merge queues and flaky test detection

Aviator is a developer productivity platform combining merge queues, stacked PRs, automated code review, and flaky test management. Its merge queue prevents broken main branches by testing PRs in order before merging. Flaky test detection identifies unreliable tests causing CI failures. Founded by ex-Google engineers who built internal developer tools at scale. YC-backed with $2.3M seed from Elad Gil. Used by Bosch, Benchling, and Lightspeed.

Ephemeral preview environments for every pull request

Bunnyshell automates the creation of full-stack ephemeral environments that spin up for every pull request and tear down when merged. Each environment is a complete replica of the application stack including databases, APIs, and frontend services. Integrates with GitHub, GitLab, and Bitbucket to provide shareable preview URLs for testing, QA, and stakeholder review.

Database CI/CD and DevSecOps platform at scale

Bytebase is an open-source database DevSecOps platform that automates schema migrations, enforces SQL standards across 200+ lint rules, and provides fine-grained access control with dynamic data masking. Teams use it for GitOps-based database change management, SQL review, and compliance across PostgreSQL, MySQL, MongoDB, Snowflake, Oracle, SQL Server, and 20+ other databases. Available as self-hosted Docker or Kubernetes deployment, or as a managed cloud service.

Anthropic's official GitHub Action that runs Claude Code in CI

Anthropic's official GitHub Action that brings Claude Code into GitHub PRs and issues — answering questions, reviewing code, and implementing changes when triggered by @claude mentions or workflow automation. This is the CI/CD Action, not the terminal agent.

Container-based CI/CD automation system

Concourse is an open-source CI/CD system built on composable primitives: resources for external artifacts, tasks for containerized work units, and jobs for orchestration. All pipelines are declarative YAML with version control, every task runs in an isolated container, and stateless workers enable horizontal scaling. Deployable via BOSH, Helm, Docker Compose, or standalone binary across any infrastructure.

Parallel test orchestration for Playwright and Cypress

Currents is a test orchestration platform that parallelizes Playwright and Cypress test suites across multiple CI machines for faster feedback. It provides intelligent test splitting, re-run strategies for flaky tests, detailed analytics dashboards, and native Playwright chunking. Achieves up to 50% test suite speed improvements through optimized distribution and parallel execution management.

Agentic application security from prompt to cloud

Cycode is an AI-native application security platform that converges AST, SSCS, and ASPM into a single solution with the Maestro AI orchestrator managing multi-agent security workflows. It provides native SAST, SCA, secrets detection, IaC scanning, and container security alongside ConnectorX integration with 100+ third-party tools. Cycode's AI Exploitability Agent reduces false positives by 94%, and the Context Intelligence Graph maps risk across code, pipelines, and runtime environments.

Programmable CI/CD engine that runs your pipelines in containers

Programmable CI/CD engine that replaces shell scripts and YAML with a typed API across 8 languages (Go, Python, TypeScript, Java, Rust, etc.). Dagger runs every pipeline step in containers for portable, locally-debuggable, cacheable builds that work identically on any CI platform. Includes GraphQL query optimization for parallelization, OpenTelemetry observability, and Dagger Cloud for managed compute.

Containerized sandboxes for AI coding agents

Dagger Container Use provides isolated container environments for AI coding agents, enabling multiple agents to work in separate sandboxed branches simultaneously. Built by the Dagger team, it ensures reproducibility and safety for autonomous code execution by giving each agent its own containerized workspace with full toolchain access.

Managed Docker build acceleration with up to 40x faster builds

Depot provides managed infrastructure for dramatically faster Docker image builds. It uses persistent build caches, native Intel and ARM builders, and optimized build scheduling to achieve up to 40x faster builds compared to standard Docker build workflows. Drop-in replacement for docker build that requires no Dockerfile changes. Used by major engineering teams to cut CI/CD pipeline times.

Open-source IaC orchestration that runs Terraform plans and applies from pull request comments

Digger is an open-source infrastructure-as-code orchestration tool for running Terraform and OpenTofu plan/apply workflows from pull request comments. It uses the team’s existing VCS and CI runners instead of adding a separate runner fleet, supports GitHub, GitLab, and Azure DevOps style workflows, and stores PR-level locks and plan cache in the user’s cloud account.

Your CI/CD scripts as code. Consistent, reproducible builds.

Build automation framework that combines Dockerfile and Makefile syntax for repeatable, containerized builds. Earthly runs every step in a container so builds produce identical results on dev laptops and CI, augmenting Make/Gradle/npm/cargo with cross-language reproducibility. Features parallel target execution, layer caching, multi-platform builds, and references across Earthfiles or repositories.

GitOps toolkit for Kubernetes — continuous delivery the cloud-native way.

Flux is a CNCF graduated GitOps tool for keeping Kubernetes clusters in sync with configuration sources like Git repositories, Helm charts, and OCI artifacts. Lightweight, composable, and designed to work with existing tools. The primary alternative to ArgoCD in the GitOps space.

Run AI coding agents in GitHub Actions from Markdown

Open-source GitHub CLI extension for defining repository automations in Markdown and running Copilot, Claude Code, Codex, Gemini or custom agents inside hardened GitHub Actions workflows.

Built-in CI/CD for GitLab

GitLab's built-in CI/CD pipeline system defined via .gitlab-ci.yml files in your repository. Features multi-stage pipelines, parallel jobs, matrix builds, environments with deployment tracking, merge train for serialized merges, auto DevOps for zero-config CI/CD, container registry, and security scanning (SAST/DAST). Supports self-hosted runners and Kubernetes executors. Tightly integrated with GitLab's merge requests and issue tracking. A leading alternative to GitHub Actions for GitLab users.

AI-powered CI/CD and DevOps platform

Enterprise DevOps platform with AI-driven deployment verification, auto-rollback, and pipeline optimization. AIDA AI assistant helps debug failed deployments. Open-source tier (Gitness) available. Covers CI/CD, feature flags, cloud cost management, and security testing in a single unified platform for engineering teams.

AI-native API gateway by Alibaba with MCP server hosting and LLM routing

Higress is an open-source AI-native API gateway developed by Alibaba that combines traditional API management with LLM-specific capabilities like token-based rate limiting, model routing, prompt caching, and MCP server hosting. Built on Envoy and Istio, it provides enterprise-grade traffic management while natively understanding AI workload patterns including streaming responses, long-lived connections, and multi-model fallback chains.

Declarative orchestration for data, AI, and infra

Kestra is an open-source orchestration platform that uses declarative YAML to define event-driven and scheduled workflows for data pipelines, infrastructure automation, and AI workloads. With over 1,200 plugins, it connects to databases, cloud services, APIs, and SaaS tools without custom glue code. Kestra reached version 1.0 LTS with agentic AI capabilities, SDKs for Python, TypeScript, Java, and Go, and SOC 2 compliance. Clients include Leroy Merlin, Huawei, Tencent, and Decathlon.

Engineering intelligence for DORA metrics and workflow automation

LinearB is a software engineering intelligence platform trusted by over 3,000 engineering leaders to track DORA metrics, cycle time broken into four phases (coding, pickup, review, deploy), and developer workflow patterns. It connects to Git repos and project management tools, benchmarks team performance against 8.1M+ pull requests from 4,800 organizations, and automates workflow improvements via gitStream — a policy-as-code engine for PR routing, labeling, and review automation.

AI-first security scanner for LLM, agent, MCP, and RAG codebases

MEDUSA is an AGPL-3.0 AI-first security scanner from Pantheon Security that checks AI and machine-learning applications, LLM agents, MCP workflows, RAG pipelines, repository-poisoning risks, secrets, and agent-specific compromise patterns.

Unified CI/CD and deployment platform with GPU support

Northflank is a unified platform for CI/CD, deployment, and infrastructure management that supports both traditional web applications and GPU-native AI workloads. It provides preview environments with full-stack database and AI model inclusion, BYOC deployment on any cloud, built-in observability, and automated scaling. Handles the complete deployment lifecycle from Git push to production with support for containers, databases, and GPU instances.

OpenAI's official GitHub Action that runs Codex in CI

OpenAI's official GitHub Action for running Codex CLI in GitHub Actions workflows with filesystem/network permission profiles and runner-level privilege controls. This is the CI/CD Action, not the terminal Codex agent; current Codex exec enables analytics by default, so telemetry policy needs review.

Task runner for Python with Poetry and uv

Poethepoet (poe) is a batteries-included task runner for Python projects that integrates with Poetry and uv package managers. Define tasks in pyproject.toml, compose them in sequential, parallel, or DAG workflows, and execute with full virtual environment context. Supports shell commands, Python scripts, environment variables, .env file loading, and auto-generated shell completion across bash, zsh, and fish for streamlined development workflows.

Cloud-native CI/CD framework for Kubernetes-native pipelines.

Tekton is a cloud-native CI/CD framework that provides Kubernetes-native pipeline resources. A Linux Foundation / CD Foundation project, it offers reusable, composable building blocks for creating CI/CD systems. Used by Google Cloud Build, Red Hat OpenShift Pipelines, and other platforms as their underlying pipeline engine.

Durable execution for fault-tolerant workflows

Temporal is an open-source durable execution platform that ensures application code runs to completion regardless of failures or outages. It captures workflow state at every step, enabling seamless recovery without custom retry logic. With SDKs for Go, Java, Python, TypeScript, and .NET, Temporal powers mission-critical orchestration at Netflix, Nvidia, and other enterprises. Valued at $5B, it replaces fragile cron jobs, state machines, and saga patterns with resilient workflow-as-code.

IaC orchestration layer for scaling Terraform and OpenTofu

Terragrunt is an infrastructure-as-code orchestration tool that wraps Terraform and OpenTofu to keep configurations DRY, manage remote state, and coordinate multi-module deployments. The 1.0 release introduced stacks, filters, run reports, and backward compatibility guarantees after 900+ releases and tens of millions of infrastructure deployments. It provides a thin orchestration layer that eliminates duplication across environments without replacing the underlying IaC tools.

Open-source GitOps automation for Terraform and OpenTofu pull requests

Terrateam is open-source GitOps infrastructure orchestration for Terraform and OpenTofu pull requests. It automates plans and applies in GitHub workflows, supports monorepos and many workspaces, and adds apply-only locks, OPA/Rego policy checks, cost and drift signals, and approval controls without forcing teams into a separate IaC platform.

AI-powered CI reliability and flaky test management

Trunk is a developer tools platform that tackles CI reliability through AI-powered flaky test detection, automatic quarantine, and merge queue management. It uses ML-based statistical analysis to identify flaky tests, isolates them to prevent pipeline blocks, and creates GitHub issues for resolution. Used by Zillow, Brex, and Faire, with $28.5M in funding and support for all major test frameworks.

High-performance build system for JavaScript and TypeScript

High-performance build system from Vercel for JavaScript and TypeScript monorepos. Turborepo intelligently caches task outputs based on content hashing, parallelizes builds across CPU cores, and shares cached results between team members via remote caching. A single turbo.json orchestrates tasks across packages with topological ordering, pruning, and composable configuration for reusable task snippets.

Autonomous coding agents that ship while you sleep

Twill is an autonomous coding agent platform that implements features, fixes bugs, and ships pull requests without manual intervention. Uses structured workflow of research, planning, human review, implementation in isolated sandbox, AI code review, then merge. Supports custom agent configurations with multiple LLM providers, isolated dev environments for verification, and integrations with GitHub, Linear, Sentry, Notion, and cloud platforms for end-to-end engineering automation.

Lightweight self-hosted CI/CD engine for the Gitea stack

Woodpecker CI is a community-maintained open-source CI/CD engine forked from Drone CI, designed as the default continuous integration solution for self-hosted Git platforms like Gitea, Forgejo, and Codeberg. With simple YAML pipeline configuration, minimal resource usage (~100MB RAM), and Apache-2.0 licensing, it provides a lightweight alternative to Jenkins and GitHub Actions for developers who prefer infrastructure they control.

GitHub's Kubernetes controller for autoscaling GitHub Actions runners

actions-runner-controller (ARC) is GitHub's official Kubernetes controller for managing self-hosted GitHub Actions runners. It automatically scales runner pods up and down based on workflow demand, provisioning runners when jobs queue and terminating them when complete. Supports runner groups, custom runner images, and organization-level runner management. Over 6,100 GitHub stars.

Infrastructure as Code orchestration and governance platform

env0 is an IaC orchestration platform that manages Terraform, OpenTofu, Pulumi, and CloudFormation workflows with built-in governance, cost estimation, and drift detection. It provides self-service infrastructure provisioning with policy guardrails, automated plan approvals, and budget controls. Supports custom deployment flows with OPA-based policy enforcement and RBAC.