VynOps
v0.1.0  ·  Open Source  ·  MIT License

VynCICD — AI-Powered CI/CD Pipeline Platform

Intelligent pipeline orchestration with AI-assisted failure triage, Kubernetes-native deployments, and DORA metrics — in a single open-source platform your team owns.

Built on Next.js 15 · Groq Llama-4 · GitHub Apps · Kubernetes · Trivy

AI failure triage
Multi-stage pipelines
K8s-native deploys
Security scanning
DORA metrics
Smart notifications
Auto rollback
Secret detection
Live deploy logs
YAML pipelines

Features

Everything your pipeline needs

AI Pipeline Failure Triage

When a build or deploy fails, the AI analyses logs, diffs, and test output to pinpoint the root cause — not just the failing step.

  • Natural language failure summaries — no log-diving required
  • Blame detection: correlates failures with recent commits and PR changes
  • Flaky test detection: identifies tests that fail intermittently vs. always
  • Suggested fix commands shown inline before re-running
  • Confidence scoring on all triage suggestions

Multi-Stage Pipeline Orchestration

Define, visualise, and manage complex multi-stage pipelines with parallel execution, conditional branching, and automatic retry policies.

  • YAML-defined pipelines with environment-specific overrides
  • Parallel stage execution with dependency graph visualisation
  • Conditional branches: deploy to staging only on main, prod on tags
  • Automatic retry with exponential backoff on transient failures
  • Matrix builds: test across multiple runtime versions simultaneously

Kubernetes-Native Deployments

First-class Kubernetes deployment steps with rolling update control, health gate checks, and automatic rollback on failure.

  • kubectl apply, Helm upgrade, and Kustomize all supported natively
  • Health gate: wait for pod readiness before marking step as passed
  • Automatic rollback triggered by health check failures or alert spikes
  • Canary deployment steps with configurable traffic split percentages
  • Deploy logs streamed live to the VynCI dashboard in real time

Security & Compliance Scanning

Integrated vulnerability scanning, secret detection, and SBOM generation at every pipeline stage.

  • Container image scanning with Trivy — blocks deploy on CRITICAL CVEs
  • Secret leak detection in source code and build output
  • SBOM (Software Bill of Materials) generated per build and stored
  • DAST scan step integration (OWASP ZAP pre-configured)
  • Policy-as-code: define allowed/blocked base images and packages

Pipeline Analytics & DORA Metrics

Track build times, failure rates, and deployment frequency across all repositories from a single dashboard.

  • DORA metrics: deployment frequency, lead time, MTTR, change failure rate
  • Per-repo and per-team pipeline health scores
  • Build time trend analysis with bottleneck identification
  • Cost-per-pipeline-run tracking when running on cloud runners
  • Anomaly detection: flag builds taking 3x longer than baseline

Smart Notifications & Escalation

Notify the right person at the right time — not everyone on every failure.

  • Slack and Teams notifications with full build context inline
  • Author-aware routing: notify the committer whose change broke the build
  • Escalation policies: page on-call if deploy fails to production
  • Quiet hours and severity filtering to prevent notification fatigue
  • GitHub PR comments with build status and AI triage summary

Installation

Quick Start

From zero to running pipeline in under 15 minutes.

01

Clone and configure

git clone https://github.com/vynops/VynCICD cd VynCICD cp .env.local.example .env.local # Required: # VYNCI_SECRET=<openssl rand -base64 32> # GITHUB_APP_ID=<your GitHub App ID> # GITHUB_APP_PRIVATE_KEY=<path to .pem> # K8S_API_URL=https://your-cluster-api-server # GROQ_API_KEY=<from console.groq.com>
02

Install and start

npm install npm run dev # Dashboard: http://localhost:3050 # Webhook endpoint: http://localhost:3050/api/webhooks/github
03

Connect your first repository

curl -X POST http://localhost:3050/api/repos \ -H 'Content-Type: application/json' \ -d '{ "owner": "your-org", "repo": "your-repo", "provider": "github" }'
04

Define your first pipeline

# .vynci.yaml in your repo root: pipelines: build-and-deploy: on: [push, pull_request] stages: - name: test run: npm test - name: build run: docker build -t app:$COMMIT_SHA . - name: deploy type: kubernetes manifest: k8s/deployment.yaml health_check: true rollback_on_failure: true

Environment Variables

Full reference for .env.local.

VariableDescriptionRequired
VYNCI_SECRETRandom 32-byte secret for session signingrequired
GITHUB_APP_IDGitHub App ID for webhook and API accessrequired
GITHUB_APP_PRIVATE_KEYPath to GitHub App .pem private key filerequired
K8S_API_URLKubernetes API server for deploy stepsrequired
GROQ_API_KEYGroq API key for AI failure triage — free at console.groq.comrequired
GITLAB_TOKENGitLab personal access token (for GitLab repos)optional
SLACK_WEBHOOK_URLSlack incoming webhook for build notificationsoptional
PAGERDUTY_ROUTING_KEYPagerDuty Events v2 routing key for deploy failuresoptional
TRIVY_ENABLEDSet to "true" to enable container vulnerability scanningoptional
PROMETHEUS_URLPrometheus URL for post-deploy health gate metricsoptional
PORTHTTP port (default: 3050)optional

Supported Providers

Git Providers

  • GitHub (App + OAuth)
  • GitLab (Self-hosted + Cloud)
  • Bitbucket (Webhooks)

Container Registries

  • Docker Hub
  • GitHub Container Registry
  • AWS ECR
  • Google Artifact Registry

Deploy Targets

  • Kubernetes (any v1.24+)
  • Helm v3
  • Kustomize
  • Raw manifests
Free · Open Source · Self-hosted

Ship faster, break less

No account. No cloud signup. Clone, configure, connect your repo, and go.