Continuous Integration and Continuous Delivery pipelines, automation and deployment workflows.
Trivy and SonarQube are both essential DevSecOps tools — but they scan different things. Trivy finds CVEs in containers, dependencies, and IaC. SonarQube finds bugs, code smells, and security hotspots in your source code. Here's what each does, where they overlap, and why serious teams run both.
Zot is the OCI-native container registry that does exactly one thing: store and distribute container images and OCI artifacts, purely according to the OCI Distribution Specification. Single binary, no runtime dependencies, built-in auth, Cosign support, CNCF Sandbox. Here's why it beats registry:2.
Windmill turns scripts into APIs, webhooks, scheduled jobs, and auto-generated UIs — without the infrastructure overhead. AGPLv3 open source, 13x faster than Airflow, self-hostable on Docker or Kubernetes. The developer platform that replaces a shelf of internal tools.
Gitea is the lightweight self-hosted GitHub alternative — single Go binary, 55k+ stars, GitHub Actions compatibility, runs on a Raspberry Pi. There's also Forgejo, its community fork that many now recommend instead. Here's what both are and when to pick which.
Flagsmith is the open source feature flag and remote config platform that decouples deployment from release. Self-host for free with no user limits, or use the managed cloud. BSD-3-Clause licensed, 15+ SDKs, and a built-in MCP Server for AI agent workflows.
Renovate is the open source bot that opens pull requests when your dependencies have updates — npm, Docker, Helm, Terraform, GitHub Actions, 90+ package managers. Set it up once, merge when ready.
GitLab Flow, Feature Branch Workflow with tags, GitHub Flow, Git Flow, Trunk-Based Development — a practical guide to choosing the right branching strategy for your team and your CI/CD pipeline.
I've been using GitLab since its early days and use GitHub daily. Here's an honest comparison from someone who knows both platforms well — when to choose which, and why.
Learn how to build a production-ready CI/CD pipeline from scratch using GitHub Actions, Docker, and automated testing. Step-by-step guide for developers who want to ship faster.