Anvil
Developer platform
A self-hosted forge with CI, secret scanning, infrastructure checks and vulnerability scanning.
- Forge, pipelines and runners you own
- Secret and IaC scanning built in
- No per-minute CI billing
A working, pinned Docker Compose stack for a self-hosted developer platform. Not a link dump - the integration layer: services wired together, environment template, quickstart, runbook, and a script that fetches the exact upstream sources at pinned commits.
Engineering teams running their own CI.
Choose your tier
One-time purchase. Higher tiers add components; the top tier adds a live onboarding session. Every tier includes the runbook, verify script and component guides.
- Working Compose stack
- Gitea wired
- Pinned source fetch
- Everything in Git Starter
- Woodpecker CI and act
- First-pipeline walkthrough
- Everything in CI Pack
- Gitleaks, KICS and Trivy
- Scanning guide
- Everything in Security Pack
- Gitness and Semaphore
- 30 days priority support
- All eight components
- 1:1 onboarding session
- Lifetime updates
How it fits together
Each service runs as its own container. The compose file defines the network, the volumes and the wiring between them.
8 services, pinned
Every project keeps its own licence and copyright. The stack ships the integration, not a fork.
| Component | What it does | Licence | Source |
|---|---|---|---|
| gitea
Go |
Lightweight self-hosted Git service with issues and pull requests. | MIT | upstream 66546045b5 |
| gitness
Go |
Git platform with built-in pipelines. | Apache 2.0 | upstream main |
| woodpecker
Go |
Container-native CI engine that runs pipelines on your own runners. | Apache 2.0 | upstream 8fcfe04e79 |
| act
Go |
Run GitHub Actions workflows locally. | MIT | upstream 4f41128141 |
| semaphore
Go |
Automation control plane for deployments. | MIT | upstream 7102353a6f |
| gitleaks
Go |
Secret scanning for repositories. | MIT | upstream b58d3f102c |
| kics
Go |
Infrastructure-as-code security scanning. | Apache 2.0 | upstream 8a0f0bbaf3 |
| trivy
Go |
Vulnerability scanning for images and dependencies. | Apache 2.0 | upstream 8f815546c7 |
Run it
# 1. fetch the pinned upstream sources
./fetch-sources.sh ./sources
# 2. configure and start
cp .env.example .env
docker compose up -d
# 3. confirm everything came up
./verify.sh
Docker Engine 24+ with the Compose v2 plugin. 4 GB RAM for light tiers, 16 GB+ for the complete deployment.