This note lists CI and CD tools, plus one sample pipeline. GitHub Actions is a workflow automation platform built into GitHub. A link covers reusing workflows in GitHub Actions. Woodpecker is a simple yet powerful CI/CD tool with high extensibility, forked from Drone CI. GitLab CI/CD supports complex pipelines and good Kubernetes integration. Semgrep is a fast open-source static application security testing tool for many languages. It detects security bugs, misconfigurations, and dangerous code patterns. SonarQube inspects source code for bugs, security vulnerabilities, and code smells. Node-EKS-CICD is a Node.js pipeline on Amazon EKS. It uses GitLab CI, Docker, Kubernetes, Helm, Prometheus, and Grafana.
GitHub Actions
- GitHub Actions: A software development workflow automation platform built into GitHub.
- Reusable Workflows: Reusing workflows in GitHub Actions - Viblo
General CI/CD Tools
- Woodpecker: A simple yet powerful CI/CD tool with high extensibility, forked from Drone CI - GitHub #CI #CD #cicd
- GitLab CI/CD: A powerful CI/CD system built into GitLab, supporting complex pipelines and good Kubernetes integration.
Security & Code Quality in CI/CD
- Semgrep: A fast, open-source static application security testing (SAST) tool supporting many languages. It detects security bugs, misconfigurations, and dangerous code patterns.
- SonarQube: A platform for automated source code quality inspection that detects bugs, security vulnerabilities, and code smells.
Pipeline Examples & Blueprints
- Node-EKS-CICD: A sample CI/CD pipeline for a Node.js application on Amazon EKS.
- Technologies: GitLab CI, Docker, Kubernetes, Helm, Prometheus, Grafana.
- Features: Security scanning with Semgrep, quality analysis with SonarQube, automatic deployment to EKS.
- Source
See also: DevOps Tools · Kubernetes · Workflow Orchestration