tahiram32/ciforge

ciforge is a single command line tool for Python projects that aims to replace many separate paid continuous integration services with one free, dependency free program. It can run entirely on a developer's own machine or inside GitHub Actions, and its goal is to save solo developers the monthly cost of subscribing to multiple commercial code quality and security tools. The tool bundles a wide range of checks into one program: it looks for code quality issues using linting and complexity analysis, checks how much of the code is covered by tests, scans for hardcoded secrets and credentials, validates configuration files in formats like JSON, YAML, and TOML, and tracks metrics about pull request size and change speed. It can also call out to AI models such as OpenAI, Anthropic, or a locally run Ollama model to review code for logic problems it might otherwise miss. Beyond those core checks, ciforge includes security focused features such as scanning dependency files for known vulnerabilities without needing internet access, checking Dockerfiles and infrastructure config for risky patterns, and detecting duplicated code structures across a project. It can also generate visual dependency diagrams, produce changelogs from commit history, estimate how a cloud infrastructure change might affect a monthly bill, and send summary reports to a Discord channel through a webhook. For everyday use, the project offers several friendlier entry points beyond the command line: an interactive menu that walks a user through options without needing to memorize flags, a simple desktop window for scanning a folder and viewing an HTML report, and a chat style interface for asking questions about a codebase in plain language. It can also act as a server for the Model Context Protocol, letting AI coding assistants call its checks directly, and can be installed as a GitHub App for one click setup. The project is installed through pip as ciforge-cli and is distributed under the AGPL version 3 license, which requires that modified versions used to provide a network service also be shared under the same license.