Topics / #cicd

Cicd projects on GitHub

Continuous integration and delivery automation

As of , the most-starred Cicd projects on GitHub are gitea (58.5K stars), Docker-OSX (53K stars) and trivy (38.5K stars). GitHub.Locker tracks 23 Cicd repositories with 457.9K stars combined. The fastest-growing on October 16 was gitleaks, with +60 stars in a day.

23Projects
457.9KStars in total
+234Stars in a day
Browse in the catalog →github.com/topics/cicd ↗

Hot right now

Most stars gained in a day · Oct 16

+60

gitleaks

gitleaks/gitleaks · ★ 30K

Gitleaks is a tool for detecting secrets like passwords, API keys, and tokens in git repos, files, or anything you pipe in via stdin.

+45

promptfoo

promptfoo/promptfoo · ★ 26.1K

promptfoo is a CLI and library for evaluating and red-teaming LLM apps — you test prompts, agents, and RAGs and run security scans on them, instead of relying on trial-and-error.

+22

trivy

aquasecurity/trivy · ★ 38.5K

Trivy is an all-in-one security scanner that finds vulnerabilities, misconfigurations, secrets, and software licenses across container images, filesystems, git repositories, VM images, and Kubernetes clusters.

+21

keploy

keploy/keploy · ★ 18.6K

Keploy is an open-source tool that auto-generates API and integration tests from real traffic: it records your API calls, database queries and streaming events, then replays them as tests.

The all-time top

23 projects · by stars

  1. #1 · go-gitea/gitea

    gitea

    Gitea is a self-hosted, all-in-one software development service: Git hosting, code review, issue tracking, project kanban, wiki, team collaboration, a package registry and CI/CD in one package.

    58.5K
  2. #2 · sickcodes/Docker-OSX

    Docker-OSX

    Docker-OSX lets you run a full macOS virtual machine inside a Docker container using KVM, giving near-native performance for security research, CI/CD, and development without owning a real Mac.

    53K
  3. #3 · aquasecurity/trivy

    trivy

    Trivy is an all-in-one security scanner that finds vulnerabilities, misconfigurations, secrets, and software licenses across container images, filesystems, git repositories, VM images, and Kubernetes clusters.

    38.5K
  1. 4

    gitleaks

    30Kgitleaks/gitleaks · Go

    Gitleaks is a tool for detecting secrets like passwords, API keys, and tokens in git repos, files, or anything you pipe in via stdin.

  2. 5

    jenkins

    26.7Kjenkinsci/jenkins · Java

    Jenkins is the leading open-source automation server. Built with Java, it takes over the repetitive parts of the development workflow so people can focus on work machines cannot do.

  3. 6

    promptfoo

    26.1Kpromptfoo/promptfoo · TypeScript

    promptfoo is a CLI and library for evaluating and red-teaming LLM apps — you test prompts, agents, and RAGs and run security scans on them, instead of relying on trial-and-error.

  4. 7

    javascript-testing-best-practices

    24.6Kgoldbergyoni/javascript-testing-best-practices · JavaScript

    A free, in-depth guide with 50+ best practices for testing JavaScript and Node.js applications, compiled and curated from dozens of blog posts, books and tools.

  5. 8

    argo-cd

    24.4Kargoproj/argo-cd · Go

    Argo CD is a declarative GitOps continuous delivery tool for Kubernetes that keeps your cluster state synced with a Git repository.

  6. 9

    keploy

    18.6Kkeploy/keploy · Go

    Keploy is an open-source tool that auto-generates API and integration tests from real traffic: it records your API calls, database queries and streaming events, then replays them as tests.

  7. 10

    goreleaser

    16.1Kgoreleaser/goreleaser · Go

    GoReleaser is a release automation tool: it handles the complexities of releasing software so you can focus on building your product.

  8. 11

    bytebase

    14.6Kbytebase/bytebase · Go

    Bytebase is an open-source database governance platform that acts as a control plane between users (humans and AI agents) and databases, governing change management, access control, and compliance so every change and query is reviewed, controlled, and recorded.

  9. 12

    semaphore

    14.3Ksemaphoreui/semaphore · Go

    Semaphore UI is a modern web interface and API for running and managing Ansible playbooks, Terraform/OpenTofu/Terragrunt, PowerShell and Bash scripts, so you don't have to deploy from a terminal anymore.

  10. 13

    runner-images

    13.5Kactions/runner-images · PowerShell

    It's the source code GitHub uses to build the VM images behind GitHub-hosted Actions runners and Microsoft-hosted Azure Pipelines agents — Ubuntu, macOS and Windows machines pre-loaded with development tools.

  11. 14

    starter-workflows

    12.2Kactions/starter-workflows · TypeScript

    This is the official collection of starter workflow templates for GitHub Actions, shown when you create a new workflow in a repository's Actions tab.

  12. 15

    earthly

    12.1Kearthly/earthly · Go

    Earthly is a build automation framework that runs every build step inside containers, giving reproducible builds with a syntax that blends Dockerfile and Makefile conventions.

  13. 16

    kubescape

    11.8Kkubescape/kubescape · Go

    Kubescape is an open-source Kubernetes security platform that scans clusters, YAML files, Helm charts, and container images for misconfigurations and vulnerabilities, covering the whole lifecycle from development to runtime.

  14. 17

    aws-devops-zero-to-hero

    11.6Kiam-veeramalla/aws-devops-zero-to-hero · Python

    A 30-day structured curriculum teaching AWS from scratch for DevOps engineers, covering core services with daily lessons, hands-on projects, and interview questions.

  15. 18

    promptflow

    11.3Kmicrosoft/promptflow · Python

    Prompt flow is a suite of development tools from Microsoft for building LLM-based AI applications end-to-end: prototyping, prompt tuning, testing, evaluation, and production deployment and monitoring.

  16. 19

    spug

    11.1Kopenspug/spug · JavaScript

    Spug is a lightweight, agent-free ops platform built for small and medium-sized businesses that bundles host management, batch command execution, an online SSH terminal, file transfer, build/deploy pipelines, task scheduling, a configuration center, and monitoring/alerting into one web app.

  17. 20

    super-linter

    10.6Ksuper-linter/super-linter · Shell

    A ready-to-run bundle of linters and code analyzers that validates your source code, enforces best practices and consistent formatting across dozens of languages, and reports issues as console output and GitHub Actions status checks.

  18. 21

    Jenkins-Zero-To-Hero

    10.1Kiam-veeramalla/Jenkins-Zero-To-Hero · Python

    A learning repo that walks through Jenkins from zero to hero: installing Jenkins, configuring Docker as a build agent, setting up CI/CD, and deploying apps to Kubernetes using Argo CD in a GitOps workflow.

  19. 22

    App-Store-Connect-CLI

    8Krorkai/App-Store-Connect-CLI · Go

    App Store Connect CLI (asc) is a fast, scriptable command-line tool for the App Store Connect API, letting you automate TestFlight, builds, submissions, signing, analytics, screenshots, and subscriptions from a terminal, IDE, or CI/CD pipeline.

  20. 23

    runpool

    384rhobuild/runpool · Go

    A Docker-native control plane that autoscales ephemeral CI runners on one capacity-bounded host, without Kubernetes: provider demand becomes durable job assignments and isolated per-job execution capsules.

Often tagged together