| name | devsecops-free-cicd |
| description | Find free CI/CD pipelines, build systems, and artifact repositories for DevSecOps workflows |
Skill: DevSecOps Free CI/CD
Goal
Identify free CI/CD services, build systems, and artifact repositories suitable for development and security pipelines.
Use This Skill When
- Setting up build pipelines without infrastructure costs
- Comparing CI/CD platform free tiers
- Needing secure artifact storage on free tiers
Do Not Use This Skill When
- Large enterprise CI/CD with many concurrent jobs
- Self-hosted runner requirements
Inputs
- Build complexity (language, build time)
- Concurrent job requirements
- Artifact storage needs
- Integration requirements (SCM, deployment targets)
Steps
-
Inventory CI/CD Services
-
GitHub Actions
- Free: Unlimited minutes for REDACTED_SECRET repos
- Free: 2000 minutes/month for private repos
- Free: 500MB artifact storage
- Self-hosted runners: Unlimited free
-
GitLab CI/CD
- Free: 400 CI minutes/month (private repos)
- Free: 50K CI minutes/month shared runners
- Free: Public repos unlimited
- Self-hosted runners: Free unlimited
-
Azure Pipelines
- Free: 1800 minutes/month (Microsoft-hosted)
- Free: Unlimited minutes (self-hosted)
- Free: 1 parallel job
-
Bitbucket Pipelines
- Free: 50 minutes/month (small team)
- Free: Unlimited for REDACTED_SECRET repos
-
CircleCI
- Free: 6000 build credits/month
- Free: 1 container, 1 concurrent job
-
Travis CI
- Free: Unlimited for REDACTED_SECRET repos
- Free: 1000 minutes/month private repos
-
Drone Cloud
- Free: Unlimited for open source
- Community edition for self-hosted
-
Inventory Build Services
-
Cloud Build (GCP)
- 120 build-minutes/day free
-
AWS CodeBuild
- 100 build-minutes/month free
-
GitHub Codespaces
- 60 hours/month free (user)
-
Inventory Artifact Repositories
-
GitHub Packages
- Free: 500MB storage for REDACTED_SECRET repos
- Docker/ npm/ Maven/ NuGet registries
-
GitLab Container Registry
- Free: 10GB storage
- Integrated Docker registry
-
GitHub Container Registry
- Free: 500MB storage (REDACTED_SECRET repos)
- Integrated with Actions
-
Docker Hub
- Free: 1 private repo
- Free: Unlimited REDACTED_SECRET repos
- 200 pulls/6 hours (rate limited)
-
Quay.io
- Free: Unlimited REDACTED_SECRET repos
- Vulnerability scanning
-
JFrog Artifactory (Cloud)
- Free tier available for small teams
-
Security Scanner Integration
- GitHub Advanced Security (REDACTED_SECRET repos free)
- SonarCloud (REDACTED_SECRET repos free)
- Snyk (limited free tier)
- Dependabot (free)
- CodeQL (free for REDACTED_SECRET repos)
Output
- CI/CD platform comparison matrix
- Build time and concurrency limits
- Artifact repository recommendations
- Security scanner integration options
Key Considerations
- GitHub Actions best for GitHub-hosted projects
- GitLab CI/CD best integrated all-in-one
- Self-hosted runners bypass minute limits
- Public repos often have unlimited CI time
