# Go

eBPF-based networking, security, and observability for Kubernetes

Cilium is a CNCF Graduated, Apache-2.0 project for Kubernetes networking, security, and observability using eBPF. It can replace kube-proxy, enforce identity-aware L3-L7 network policies, and add Hubble flow observability plus Tetragon runtime-security signals. Current source checks support GKE Dataplane V2 using Cilium/eBPF and Azure CNI Powered by Cilium for AKS.

Run GitHub Actions locally for fast feedback

Act is an open-source tool that runs GitHub Actions workflows locally using Docker containers that match GitHub's execution environment. It provides instant feedback on workflow changes without pushing to a repository, supports matrix builds, secret management, and artifact handling. Act can also replace Makefiles by using workflow files as task definitions, making it useful for both CI/CD development and local task automation across development teams.

Build, share, and run containers

Industry-standard container platform for building, shipping, and running applications in isolated, reproducible environments. Package apps with all dependencies into portable containers using Dockerfiles and images. Docker Compose orchestrates multi-container applications. Docker Hub hosts millions of pre-built images. Docker Desktop provides GUI management on Mac/Windows. Essential for local development, CI/CD, and production deployments. The foundation of modern containerized infrastructure.

Run LLMs locally with one command

Tool for running large language models locally on your machine with a simple CLI interface. Download and run Llama 3, Mistral, Gemma, Phi, Code Llama, and dozens of other open-source models with a single command. Features model management, GPU acceleration (NVIDIA/AMD/Apple Silicon), OpenAI-compatible API server, Modelfile for customization, and multi-model switching. Ideal for offline AI development, privacy-sensitive use cases, and local testing. 120K+ GitHub stars.

Backend development framework with built-in infrastructure automation

Encore is a backend development framework for TypeScript and Go that automates infrastructure provisioning from application code. Developers define APIs, databases, cron jobs, and pub/sub topics using framework primitives, and Encore generates the necessary cloud infrastructure on AWS or GCP. Includes local development tooling with service catalog, tracing, and automatic API documentation.

Secret scanning across Git history and cloud storage

TruffleHog by Truffle Security scans for high-entropy strings and secrets across GitHub history, S3 buckets, and other data stores with 26.7K+ GitHub stars. It goes beyond simple pattern matching by verifying whether discovered credentials are actually active and valid, significantly reducing false positives and helping teams prioritize remediation of truly exposed secrets.

Container orchestration at scale

Kubernetes (K8s) is the industry-standard open-source container orchestration platform originally developed by Google and now maintained by the CNCF. Automates deployment, scaling, self-healing, and networking of containerized workloads across clusters of machines. Runs everywhere from laptops (kind, k3s) to every major cloud (EKS, GKE, AKS), and is the foundation of modern cloud-native infrastructure.

Modular open-source identity infrastructure with Kratos, Hydra, and Keto

Ory provides a suite of modular open-source identity components: Kratos for user management and authentication, Hydra for OAuth2 and OIDC, Oathkeeper for API gateway authorization, and Keto for fine-grained permission management. Used by OpenAI and other major organizations. API-first design with Go-based microservices that deploy independently or together as Ory Network cloud.

Infrastructure as Code

HashiCorp's infrastructure-as-code tool for provisioning and managing cloud resources declaratively using HCL (HashiCorp Configuration Language). Write infrastructure definitions once and deploy to AWS, GCP, Azure, DigitalOcean, and 4,000+ providers. Features state management for tracking resources, plan/apply workflow for safe changes, modules for reusability, and workspaces for environment isolation. The industry standard for multi-cloud IaC with 48K+ GitHub stars.

Open-source vector database for AI-native applications and semantic search.

Weaviate is an open-source vector database purpose-built for AI applications. Supports vector, keyword, and hybrid search with built-in vectorization modules for OpenAI, Cohere, Hugging Face, and more. Used for RAG pipelines, semantic search, recommendation engines, and multimodal search. Written in Go for high performance.

Open-source secret detection for Git repositories

Gitleaks is an open-source secret scanner with 27K+ GitHub stars that detects hardcoded passwords, API keys, tokens, and private keys in Git repositories, files, directories, and full Git history. It integrates via GitHub Actions, pre-commit hooks, CI/CD pipelines, and single-binary local scans.

Open-source extensible AI agent by Block

Autonomous coding agent from Block (Square) that works with any LLM through MCP-first extensibility. Apache 2.0 licensed with 47K+ GitHub stars and a Linux Foundation AAIF founding project. Designed for terminal-based workflows with deep tool integration, making it a strong open-source option for developers who want agent-assisted coding without vendor lock-in.

Cloud cost estimates for Terraform changes in pull requests

Infracost shows cloud cost changes directly in pull requests before infrastructure-as-code changes are deployed. It calculates cost impact across AWS, Azure, and GCP for Terraform, Terragrunt, CloudFormation, and AWS CDK workflows, with diffs in GitHub, GitLab, Bitbucket, and Azure DevOps. 12.4K+ GitHub stars, Apache 2.0 licensed. Used by GitLab, HelloFresh, JPMorgan Chase, BMW, and Accenture.

GPU-accelerated open-source vector database

Milvus is an open-source vector database with 45K+ GitHub stars for billion-scale similarity search. Features GPU-accelerated indexing, hybrid search combining vector and scalar filtering, multi-tenancy, partitioning, and horizontal scaling. Supports HNSW, IVF, DiskANN, and GPU index types. SDKs for Python, Java, Go, and Node.js. Zilliz Cloud offers a managed version. A production-grade foundation for RAG pipelines and recommendation systems at enterprise scale.

Code intelligence platform

Code intelligence platform providing universal code search across all repositories, languages, and code hosts. Search with regex, structural patterns, and diff/commit search across GitHub, GitLab, Bitbucket, and self-hosted repos. Features code navigation (go-to-definition, find references) in the browser, batch changes for large-scale refactoring, code insights for tracking metrics, and Cody AI assistant for code generation and explanation. Self-hosted and cloud options.

Go implementation of the Model Context Protocol SDK

mcp-go is a Go implementation of the Model Context Protocol, providing both server and client SDKs for building MCP integrations in Go. It supports stdio and SSE transports, resource management, tool registration, and prompt templates. Designed for Go developers building MCP servers for DevOps tools, CLI applications, and backend services. Over 8,000 GitHub stars.

Open-source Terraform fork — community-driven Infrastructure as Code.

OpenTofu is an open-source fork of Terraform created by the Linux Foundation after HashiCorp switched Terraform to the BSL license. Designed to preserve existing Terraform workflows and configurations, it offers state encryption, early variable evaluation, and a community-driven development model. Backed by major cloud providers and companies.

Terraform pull request automation via GitHub/GitLab comments

Atlantis is a self-hosted Terraform pull request automation tool that runs plan and apply operations triggered by GitHub, GitLab, Bitbucket, or Azure DevOps comments. Type 'atlantis plan' on a PR to see infrastructure changes, then 'atlantis apply' to deploy. 9,100+ GitHub stars, Apache 2.0 licensed. Widely adopted as the standard for GitOps-style Terraform workflows, with locking to prevent concurrent modifications to the same resources.

Self-hosted proxy API for routing AI CLI accounts into OpenAI-compatible endpoints

CLIProxyAPI is an open-source Go proxy server that wraps Gemini CLI, Claude Code, OpenAI Codex, Grok Build, and related CLI account flows behind OpenAI/Gemini/Claude-compatible API endpoints. Use it carefully: it can touch OAuth sessions, auth files, logs, and provider account policies, so production use needs credential and ToS review.

ML model serving and deployment framework

BentoML is an open-source framework with 7K+ GitHub stars for packaging, deploying, and serving ML models as production-ready APIs. Bundles models, preprocessing, and serving logic into portable Bento archives with auto-generated REST/gRPC endpoints. Features adaptive batching for throughput optimization, GPU scheduling, multi-model inference pipelines, and containerization. Supports all major ML frameworks including PyTorch, TensorFlow, scikit-learn, and Hugging Face Transformers.

Kubernetes ChatOps bot for Slack, Teams, and Discord

Botkube is a Kubernetes ChatOps platform that brings cluster management into Slack, Microsoft Teams, and Discord. It provides real-time alerts for cluster events, enables kubectl command execution from chat, and supports automated workflows triggered by Kubernetes resource changes. Features plugin architecture for extensibility and RBAC-based access control for team collaboration.

Cross-machine dotfile manager with template support and encryption

Chezmoi manages dotfiles across multiple machines with template support for machine-specific configuration, secret encryption, and integration with password managers. It handles the complexity of maintaining consistent development environments across work laptops, personal machines, and servers. Over 15,000 GitHub stars with support for 1Password, Bitwarden, LastPass, and gpg encryption.

Kubernetes-native cloud infrastructure control plane

Crossplane is a CNCF Graduated open-source project that extends Kubernetes to manage cloud infrastructure through declarative APIs. Platform teams compose custom infrastructure abstractions as Compositions and publish them as self-service APIs. It provisions resources across AWS, Azure, GCP, and 200+ providers directly from kubectl. Used by 450+ organizations with 11,000+ GitHub stars.

Programmable CI/CD engine that runs your pipelines in containers

Programmable CI/CD engine that replaces shell scripts and YAML with a typed API across 8 languages (Go, Python, TypeScript, Java, Rust, etc.). Dagger runs every pipeline step in containers for portable, locally-debuggable, cacheable builds that work identically on any CI platform. Includes GraphQL query optimization for parallelization, OpenTelemetry observability, and Dagger Cloud for managed compute.

Single-binary workflow engine with zero dependencies

Dagu is a local-first, self-contained workflow engine that runs as a single binary under 128MB of memory with no database, message broker, or runtime dependencies. Workflows are defined in declarative YAML and can orchestrate shell commands, Docker containers, SSH sessions, HTTP calls, and SQL queries. It includes a built-in Web UI with DAG visualization and Gantt charts, plus an AI agent that creates and debugs workflows from natural language via Slack or Telegram.

Instant isolated dev environments powered by Nix

Devbox is an open-source command-line tool that creates instant, reproducible development environments using Nix packages without requiring you to learn Nix. Define your project dependencies in a simple devbox.json file and get isolated shells with access to over 400,000 package versions. It eliminates dependency conflicts between projects and ensures every team member works in an identical environment, with support for devcontainers, Docker, and cloud deployment.

Modular AI prompt framework for everyday tasks

Fabric is an open-source framework that organizes AI prompts into reusable patterns for solving everyday tasks like summarizing content, explaining code, extracting insights from videos, and generating social media posts. Written in Go with support for 20+ AI providers including OpenAI, Claude, Gemini, and Ollama, it runs from the command line and can serve as a REST API. With 40,000+ GitHub stars, Fabric bridges the gap between AI capabilities and practical workflow automation.

Generate SDKs and API documentation from OpenAPI specs

Fern is a platform that generates idiomatic client SDKs and beautiful API documentation from OpenAPI specifications. It produces type-safe SDKs for TypeScript, Python, Java, Go, Ruby, and C# with features like pagination, retries, and streaming built in. The documentation includes API reference, guides, and an AI-powered search assistant. Used by companies like Cohere, ElevenLabs, and Merge.

Enterprise secrets management and data protection

HashiCorp Vault is a source-available secrets management tool with 32K+ GitHub stars providing centralized management of tokens, passwords, certificates, API keys, and encryption keys. Features dynamic secrets that are generated on-demand with automatic revocation, encryption as a service, identity-based access with fine-grained policies, and audit logging. Supports 100+ integrations including AWS, GCP, Azure, Kubernetes, and databases. The enterprise standard for secrets management at scale.

Leading open-source service mesh for Kubernetes microservices

Istio is the most widely adopted open-source service mesh for Kubernetes, providing traffic management, security, and observability for microservice architectures. It uses Envoy proxy sidecars to intercept and manage service-to-service communication with mutual TLS, fine-grained traffic routing, circuit breaking, and distributed tracing. CNCF Graduated project used in production by Google, IBM, and Salesforce.

Terminal dashboard for Kubernetes

K9s is an open-source terminal UI with 28K+ GitHub stars for managing Kubernetes clusters interactively. Provides a real-time dashboard with resource navigation, log tailing, shell access to pods, port forwarding, and RBAC visualization — all from the terminal without kubectl commands. Features Vim-style navigation, custom resource views, plugin system, cluster metrics, and multi-cluster support. Dramatically reduces the complexity of daily Kubernetes operations for developers and SREs.

Kubernetes operator for serving AI inference workloads

KubeAI is an Apache-2.0 Kubernetes operator for deploying and scaling AI inference workloads, including LLMs, embeddings, reranking, and speech-to-text. It gives platform teams OpenAI-compatible endpoints, model proxy/controller primitives, model caching, scale-from-zero behavior, and cluster-native resource management for self-hosted inference on Kubernetes.

Open-source real-time voice, video, and AI agent infrastructure

LiveKit is an open-source WebRTC infrastructure platform for building real-time voice, video, and data applications. It powers ChatGPT Advanced Voice Mode and serves as the foundation for AI agent voice interactions. LiveKit provides server-side SDKs for Go, Python, Node.js, and Rust alongside client SDKs for every major platform. The Agents framework lets developers build voice-enabled AI assistants with speech-to-text, LLM processing, and text-to-speech pipelines in Python or Node.js.

Open-source platform for managing AI coding agents as teammates

Multica is an open-source managed agents platform that lets you assign coding tasks to AI agents like Claude Code and Codex as if they were team members. It provides a unified dashboard for task assignment, execution monitoring, and skill reuse across local and cloud compute environments. With multi-workspace support, team-level isolation, and reusable skill compounding, Multica turns autonomous coding agents into organized, trackable development resources.

Open-source zero-trust networking with WireGuard

NetBird is an open-source zero-trust networking platform that creates encrypted WireGuard overlay networks between devices without opening ports or configuring firewalls. It provides peer-to-peer connectivity with NAT traversal, access control policies, DNS management, and a web dashboard for team management. NetBird replaces traditional VPNs with a simpler, more secure mesh networking approach for self-hosted infrastructure and remote teams.

OpenAI API management gateway for 100+ LLM providers

One API is a self-hosted LLM API gateway that provides a unified OpenAI-compatible interface for managing multiple model providers including OpenAI, Azure, Anthropic, Google, and dozens of Chinese providers. It handles load balancing, quota management, rate limiting, token tracking, and channel-based routing through a web dashboard. Widely adopted in the Chinese developer ecosystem with over 18,000 GitHub stars.

Fine-grained authorization engine by Okta

OpenFGA is an open-source authorization engine inspired by Google Zanzibar, built and maintained by Okta (Auth0). It provides relationship-based access control with a flexible modeling language, sub-millisecond permission checks, and SDKs for major languages. OpenFGA is used by companies including Grafana Labs, Canonical, and Docker for fine-grained access control in multi-tenant applications.

Single-binary open-source backend

PocketBase is an open-source backend in a single Go binary with 44K+ GitHub stars providing a real-time database, authentication, file storage, and admin dashboard. No dependencies, no Docker required — just download and run. Features collection-based data modeling, REST API, real-time subscriptions, OAuth2 authentication, file uploads with thumbnails, and a built-in admin UI. Extends with custom Go code or JavaScript hooks. Ideal for prototyping, MVPs, and small-to-medium applications.

Version control for AI coding-agent actions

Re_gent is an open-source version-control layer for AI coding-agent activity. Instead of only reviewing the final Git diff, it records what the agent attempted, changed, and executed along the way so teams can trace, undo, and govern autonomous coding work. It fits Claude Code, Codex, Cursor, and multi-agent teams that need an audit trail between prompt and pull request.

Autonomous Kubernetes and GPU infrastructure optimization

ScaleOps provides autonomous real-time management of Kubernetes and GPU infrastructure, reducing cloud costs by up to 80 percent without manual configuration. Backed by 130 million in Series C funding at an 800 million dollar valuation, it serves enterprises including Adobe, Wiz, DocuSign, and Salesforce. The platform continuously rightsizes pods, optimizes replicas, manages nodes, and allocates GPUs based on live workload demand rather than static configurations.

Auto-generate SDKs and docs from backend routes

Speakeasy uses AI to parse backend API routes and auto-generate production-ready SDKs in multiple languages alongside OpenAPI documentation. It ensures that client libraries and documentation always match the current backend implementation, eliminating the drift between API code, SDK behavior, and documentation that plagues most API-first teams as their services evolve.

Google Zanzibar-inspired authorization database

SpiceDB is an open-source authorization database inspired by Google's Zanzibar system, providing relationship-based access control (ReBAC) at scale. It defines permissions through a schema language that models relationships between users, resources, and roles, then evaluates authorization checks in single-digit milliseconds. Used by companies like Netflix and GitHub, SpiceDB handles millions of permission checks per second.

Generate production-ready SDKs from API specifications

Stainless generates idiomatic, production-ready client SDKs from OpenAPI specifications with features like automatic pagination, retries, streaming, and proper error handling baked in. Used by Anthropic, OpenAI, Cloudflare, and Lithic to maintain their official SDKs. Produces TypeScript, Python, Go, Java, and Kotlin SDKs that match hand-written quality with automated maintenance and versioning.

Zero-config VPN for developers

Mesh VPN built on WireGuard that creates secure networks between devices with zero configuration. Access dev servers, self-hosted services, and home labs remotely from anywhere. Handles NAT traversal automatically with MagicDNS for easy device naming, making it the simplest way to securely connect distributed development environments and infrastructure.

Durable execution for fault-tolerant workflows

Temporal is an open-source durable execution platform that ensures application code runs to completion regardless of failures or outages. It captures workflow state at every step, enabling seamless recovery without custom retry logic. With SDKs for Go, Java, Python, TypeScript, and .NET, Temporal powers mission-critical orchestration at Netflix, Nvidia, and other enterprises. Valued at $5B, it replaces fragile cron jobs, state machines, and saga patterns with resilient workflow-as-code.

Open-source GraphQL Federation platform replacing Apollo GraphOS

WunderGraph Cosmo is an open-source GraphQL Federation platform with a schema registry, composition checks, and high-performance Go router. It has overtaken Apollo GraphOS as the dominant federation solution, with 87% of GraphQL Federation adopters using Cosmo versus Apollo's decline from 57% to 28%. Supports Federation v1 and v2, provides CI/CD schema validation, and includes a managed cloud option. Apache 2.0 licensed with active enterprise adoption.

Open-source identity management with built-in multi-tenancy

ZITADEL is an open-source identity and access management platform that handles authentication, authorization, and user management for B2B and B2C applications. It supports OIDC, SAML, OAuth 2.0, Passkeys, MFA, and passwordless login out of the box. Built with multi-tenancy as a core feature, ZITADEL lets you manage multiple organizations with delegated admin access, custom branding, and isolated identity stores—all from a single deployment.

Google's official Agent Development Kit for building AI agents in Go

adk-go is Google's official Agent Development Kit for the Go programming language, providing the tools and abstractions needed to build production AI agents. It supports tool calling, multi-turn conversations, structured outputs, and integration with Google's Gemini models. With 7,300 GitHub stars and Apache 2.0 license, it brings first-class AI agent development capabilities to the Go ecosystem.