Harness Gitness is an open-source DevOps platform that provides Git hosting, CI/CD pipelines, artifact registries, and cloud development environments (Gitspaces). The system is built as a monolithic Go backend with a React/TypeScript frontend, using Google Wire for dependency injection and supporting both PostgreSQL and SQLite databases. Key entry points include the main server binary (`cmd/gitness`), REST API handlers organized by resource (repos, pull requests, spaces, pipelines, gitspaces, registries), and a CLI for administrative tasks. The architecture follows a layered pattern: HTTP handlers → controllers → services → stores, with an event-driven subsystem for asynchronous processing (pull requests, checks, gitspace lifecycle, merge queues). External dependencies include Drone runner libraries for pipeline execution, Docker API for container orchestration, and cloud provider SDKs (AWS, GCP) for infrastructure provisioning. The artifact registry is based on a fork of Harbor and supports OCI, Maven, npm, NuGet, Python, Helm, RPM, and other package formats. The frontend is modular, with separate codebases for the core Git UI, artifact registry (AR), and CDE (Gitspaces), using Harness UI components and custom factories for extensible package-type rendering.
werf is a production-grade CLI tool for full-cycle CI/CD of containerized applications to Kubernetes. It provides a unified pipeline for building container images (via Docker or Buildah backends), managing Git-based reproducible configurations (giterminism), deploying Helm charts with advanced tracking and lifecycle management, and performing cleanup of container registry and host resources. The architecture is monolithic but modular, with clear interface abstractions for container backends, registry clients, stage storage, and parallel execution. The codebase demonstrates high craftsmanship in areas like composable path matching, deterministic slug generation, and distributed locking, though it carries some duplication between legacy and modern deploy engines and a few forked dependencies. The repository is actively maintained with frequent releases and extensive test coverage across unit, integration, and e2e suites.
JayeX (jx) is a modular command-line interface (CLI) tool for managing JayeX 3.x, a CI/CD platform for Kubernetes. The application is built with Go and uses the Cobra library for command parsing. It provides commands for managing namespaces, viewing dashboards, upgrading plugins, checking versions, and interacting with various JayeX components. The architecture follows a modular plugin system where core functionality is extended through installable plugins. The tool interacts with Kubernetes clusters via client-go and maintains version information through build-time injection. Entry points are in cmd/main.go which delegates to platform-specific app implementations.
This repository implements a GitHub Action that automates deployment of static content to GitHub Pages. It takes a folder from the workspace, optionally builds it, and pushes the contents to a specified branch (default `gh-pages`) using git worktrees and rsync. The action supports authentication via GitHub token, personal access token, or SSH deploy keys, and offers extensive configuration options including clean deployments, single-commit history, target subfolders, dry runs, tags, and Git LFS. The architecture is modular: `src/main.ts` is the entry point, `src/lib.ts` orchestrates the workflow, `src/git.ts` handles repository initialization and deployment, `src/worktree.ts` manages git worktree creation with retry logic, `src/ssh.ts` configures SSH clients, and `src/execute.ts` provides a reusable command execution wrapper. The action relies on external tools `git`, `rsync`, and `ssh-agent`, and uses the `@actions/*` toolkit for GitHub Actions integration. The codebase is well-structured TypeScript with comprehensive unit and integration tests, and follows modern JavaScript practices with ESLint, Prettier, and Jest.
Jenkins is the leading open-source automation server, providing a web-based platform for continuous integration and continuous delivery (CI/CD). In production, it orchestrates build, test, and deployment pipelines triggered by SCM changes, scheduled intervals, or manual requests. The architecture is a monolithic Java web application with a plugin-based extension system, using Stapler for URL routing, Jelly/HTML views, and a modern JavaScript frontend bundled with webpack. Key entry points include the central `Jenkins` singleton, a rich set of CLI commands (e.g., `BuildCommand`, `CreateJobCommand`), and a REST-like API. Data flows involve job scheduling via the `Queue`, execution on agents (controller/agent architecture), SCM checkout, build steps, artifact archiving, and result reporting. External dependencies include a servlet container (Jetty), Spring Security (migrating from Acegi), XStream for XML persistence, and numerous libraries for remoting, templating, and UI components. The codebase is highly extensible through `@Extension` points, descriptors, and a well-defined plugin lifecycle.
This repository provides a comprehensive continuous integration (CI) solution for ROS (Robot Operating System) projects. It automates the process of setting up a ROS environment, building code, running tests, and performing additional checks (such as code formatting, static analysis, and ABI compatibility) across multiple CI platforms including Travis CI, GitLab CI, GitHub Actions, and Bitbucket Pipelines. The system is designed to be highly configurable, supporting a wide range of ROS distributions from legacy versions to the latest releases, and isolates builds using Docker by default to ensure consistency across different environments. The architecture is modular, with clear separation of concerns: entry points for each CI system delegate to a central orchestration script (ci_main.sh), which in turn relies on specialized modules for environment setup, ROS configuration, workspace management, and various build systems (catkin_make, catkin_tools, colcon, etc.). Notable for their reusability and craftsmanship are the utility library (src/util.sh), which provides robust logging, error handling, and timing functions, and the Docker isolation layer (src/isolation/docker.sh), which handles the complexities of running CI jobs in containers including volume mounting, credential forwarding, and container lifecycle management. The project demonstrates strong engineering practices through its maintainability, active support for both ROS1 and ROS2, and adaptability to various CI systems. It has been widely adopted in the ROS community, as evidenced by its usage in numerous repositories. Technical debt is kept low through regular updates to support new ROS distributions and CI platforms, and the codebase avoids common pitfalls in shell scripting by using well-structured functions and consistent error handling.
OVH CDS is an enterprise-grade continuous delivery and DevOps automation platform. The repository contains a set of Go services (API, CDN, hooks, VCS, repositories, hatcheries, worker, elasticsearch) managed via a common engine binary, supported by PostgreSQL, Redis, and OpenSearch/Elasticsearch, plus an Angular web UI, a cdsctl CLI, and gRPC-based action/integration plugins. In production it orchestrates pipelines and workflows, spawns workers on Kubernetes, Swarm, OpenStack, vSphere or local hosts, ingests VCS webhooks, stores job logs and artifacts through a pluggable CDN storage layer, and enforces fine-grained RBAC across projects, regions, workflows, and variable sets. Both legacy v1 workflows and newer as-code v2 workflows are implemented and actively maintained side-by-side.
PullPreview is a GitHub Action implemented in Go that provisions ephemeral preview environments for pull requests. It manages cloud instances (AWS Lightsail or Hetzner), installs Docker or Kubernetes (k3s), and deploys applications using Docker Compose or Helm. The action integrates deeply with GitHub PR workflows: it reacts to labels, synchronizes SSH keys from repository collaborators, updates PR comments with deployment status and preview URLs, and performs scheduled cleanup of dangling instances. The codebase is organized around a provider abstraction pattern, with concrete implementations for Lightsail and Hetzner that share common orchestration logic for instance lifecycle, SSH access, and deployment. It is a self-contained CLI binary that runs as a composite action step, bundling all dependencies into a single executable.
This repository is the operational backbone for Bazel's continuous integration system. It orchestrates Buildkite pipelines for hundreds of Bazel projects (including Bazel itself, rules repositories, and downstream projects like TensorFlow), manages cloud infrastructure on Google Cloud Platform (GCE, GCR, Cloud SQL, BigQuery), and provides a suite of tools for release management, cherry-picking, metrics collection, and a monitoring dashboard. The architecture is polyglot: a Rust agent uploads test artifacts from Build Event Protocol files, a Go service collects and publishes pipeline performance metrics, a Spring Boot backend with a Next.js frontend serves a dashboard for tracking GitHub issues and build stats, and Python scripts (primarily `bazelci.py`) handle dynamic pipeline generation and CI orchestration. Infrastructure is managed via Terraform, with GitHub Actions for automated PR review of the Bazel Central Registry and release workflows. The codebase is actively maintained but shows signs of technical drift, including hardcoded versions, references to end-of-life platforms, and a large number of manually defined pipelines that risk configuration drift.
This repository provides a GitHub Action that wraps the lychee link checker to validate links in Markdown, HTML, and text files. The action downloads and installs a specified version of lychee, runs it with configurable arguments, and processes the output to set exit codes and generate reports. The core action is well-designed with robust version handling and error processing, but the associated workflow files show signs of technical drift due to outdated action versions (e.g., actions/checkout@v7 which doesn't exist). The action is actively maintained with recent commits and automated version update workflows.
This repository implements a GitHub Action that triggers AWS CodeBuild builds. It starts a build using the AWS SDK, streams CloudWatch Logs to the GitHub Action output, and waits for the build to complete. The action handles rate limiting with exponential backoff and jitter, and supports cancelling builds via signal handling. The core logic is in `code-build.js`, which exports functions for building, waiting for completion, and processing inputs. The action is designed to be used in GitHub workflows but can also be run locally via the `local.js` script.
LocalStack is a cloud service emulator that provides a local AWS environment for testing and development. It runs as a containerized application that mocks AWS services (Lambda, S3, DynamoDB, Step Functions, etc.) through a modular, plugin-based architecture. The system receives AWS API calls via local endpoints, routes them to service-specific mocks, and returns AWS-compatible responses. Key components include a runtime manager for service lifecycle, CloudFormation resource providers for infrastructure simulation, and a Step Functions ASL engine for workflow execution. The codebase demonstrates strong modularity, extensive use of design patterns (plugin, resource provider, state machine), and comprehensive testing. Although the repository is marked as archived (consolidated into a unified distribution), the code exhibits high craftsmanship with clean abstractions and reusable patterns.