Deploy Now

Stars

150

Forks

37

Watchers

2

Developer links

Pipewright

Draw a pipeline, push code, and watch it build, deploy, and roll back on its own: Pipewright is a self-hosted CI/CD platform delivered as one static binary. Pipelines are drawn on a two-level canvas of stages and jobs, then run with matrix builds, sidecar databases for tests, manual approval gates, and typed parameters validated at trigger time. The pipeline can also live in the repository as a per-branch .pipewright.yml file, and triggers cover webhooks, schedules, branch to environment mapping, and chained pipelines. Builds run isolated inside containers with cached dependencies and a content-addressed artifact store, and JUnit and Cobertura reports feed quality gates that stop bad code before deployment. Deployment is agentless over SSH: health checks gate a zero-downtime cutover, failures roll back on their own, and environments track their active version with one-click rollback and promotion toward production. Deployed services receive HTTPS domains through a managed Caddy proxy with automatic certificates, path routing, and load balancing, and each pull request gets a throwaway preview address with its own certificate. The operations side watches host CPU, memory, and disk, manages containers and networks across servers, and opens terminals in the browser. Notifications route by event to Slack, email, WeCom, DingTalk, Lark, or a webhook, approvals arrive as signed links, and the four DORA metrics are computed out of the box. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Pipewright
Pipewright
Pipewright
Pipewright

Benefits

  • One Binary Replaces Three Tools
  • Continuous integration, multi-server deployment, and container operations ship in a single static binary with an embedded interface and SQLite storage, so there is no JVM, plugin pile, or tool assembly to maintain.
  • Deployments That Roll Back
  • Health checks gate every zero-downtime cutover, a failed release returns to the previous version automatically, and environments remember their active version for one-click rollback at any moment.
  • HTTPS Without Certificate Chores
  • A managed Caddy proxy on each host issues and renews Let's Encrypt certificates by HTTP or DNS challenge, and adds path routing, redirects, access control, and load balancing.
  • Every PR Gets A Preview
  • A successful pull request run receives its own subdomain with a dedicated certificate and route, so reviewers open one link and see the change actually running before merge.

Features

  • Visual Pipeline Canvas
  • A two-level DAG canvas arranges stages and jobs in serial or parallel, with matrix builds, approval gates, sidecar services, conditions, and typed run parameters.
  • Pipeline As Code
  • Commit a .pipewright.yml file per branch and the run follows the repository version, with the canvas always available as fallback and round-trip import and export.
  • Isolated Container Builds
  • Builds run in Docker, nerdctl, or Podman with pinned tool versions, branch and lockfile keyed caches, and JUnit plus Cobertura quality gates.
  • Agentless SSH Deployment
  • Servers need no installed agent: deployments execute over SSH with health gating, parallel fan-out across hosts, environment promotion chains, and visible partial failures.
  • Server And Container Ops
  • Multi-host dashboards track CPU, memory, disk, and trends, and manage containers, images, stacks, volumes, and networks with live logs and browser terminals.
  • DORA Metrics Included
  • Deployment frequency, lead time for changes, change failure rate, and mean time to restore are computed automatically and graded into performance bands.

Apps Similar to Pipewright