Guided scenario
Open-source, self-hostable CI/CD
Teams that want to own their build pipeline, whether for control, cost, or air-gapped environments, prefer CI/CD they can self-host and inspect. This shortlist ranks tools by genuine open-source licensing, a first-class self-hosting option, and container-native execution. Also weigh how cleanly it integrates with your git host and the maintenance burden of running it yourself.
Azure DevOps
azure.microsoft.com/en-us/products/devops
Azure DevOps is Microsoft's integrated software-delivery suite: Repos for Git hosting, Pipelines for CI/CD, Boards for work tracking, and Artifacts for packages, available as a cloud service and as Azure DevOps Server for self-hosting.
Bitbucket Pipelines
bitbucket.org/product/features/pipelines
Bitbucket Pipelines is the CI/CD service built into Atlassian's Bitbucket for automating builds and deployments from Bitbucket repositories.
Buildkite
buildkite.com
Buildkite is a CI/CD platform built around a hybrid model: it provides a hosted control plane while build agents run on the customer's own infrastructure.
CircleCI
circleci.com
CircleCI is a CI/CD platform for automating build, test, and deployment pipelines, serving development teams of varying sizes.
Drone CI
www.drone.io
Drone CI is a container-native, open-source continuous integration platform where every pipeline step runs as a container, with pipelines defined as code.
GitHub Actions
github.com/features/actions
GitHub Actions is a CI/CD service built directly into GitHub for automating builds, tests, and deployments through workflows defined as code in the repository.
GitLab CI/CD
docs.gitlab.com/ee/ci
GitLab CI/CD is the pipeline automation built into the GitLab platform for building, testing, and deploying code across the full DevOps lifecycle.
Harness
www.harness.io
Harness is a software-delivery platform whose continuous-integration and continuous-delivery modules add ML-driven test intelligence, pipeline governance, and deployment verification on top of container-native builds.
Pairs well with
Tools commonly used alongside this setup. Chosen editorially, not ranked.
Amazon ECR
Container Registries
Amazon Elastic Container Registry (ECR) is AWS's managed, OCI-compliant registry for storing and deploying container images, integrated with AWS services for teams running containers on AWS. It supports public images through ECR Public and includes vulnerability scanning, with enhanced scanning available via Amazon Inspector. It is a managed cloud service and is not self-hostable. A free tier covers limited private storage for the first year plus a public allowance, with usage-based billing for storage and egress beyond that. It holds a broad set of certifications including SOC 2, ISO 27001, FedRAMP, HIPAA, and PCI-DSS.
AWS CodeArtifact
Artifact Management
AWS CodeArtifact is Amazon's managed artifact repository for storing and sharing software packages, integrated with AWS, supporting formats including npm, PyPI, Maven, NuGet, Swift, and generic packages. It targets teams building on AWS and is delivered as a cloud-hosted service that is not open-source or self-hostable. It does not include native vulnerability scanning. A free-tier allowance is included, with usage-based billing for storage and requests beyond it. It carries SOC 2, ISO 27001, FedRAMP, HIPAA, and PCI-DSS compliance and sits in the low pricing tier.
Ansible
Infrastructure as Code
Ansible is an open-source automation tool for configuration management, application deployment, and provisioning using agentless playbooks written in YAML. It targets operations teams automating IT tasks across multi-cloud and on-premises environments. Ansible Core is free and open-source, while Red Hat's Ansible Automation Platform adds an enterprise subscription with quote-based pricing. It takes an imperative, task-based approach and is agentless and self-hostable. The platform carries SOC 2 and ISO 27001 compliance.