Open-source infrastructure-as-code tools in 2026
32 open-source projects, ranked by GitHub stars and how recently each was worked on. Terraform leads with 50k stars, ahead of Trivy. 30 had code pushed in the last three months. Most common licenses: Apache-2.0 (19), MIT (7) and MPL-2.0 (3).
Open-source infrastructure-as-code tools
Complete systems you can adopt 3
-
1
Kestra kestra-io
Orchestrate everything, everywhere. The open-source control plane for workflows across data, infrastructure, business processes and AI agents. Declarative YAML, event-driven, any language, Git-versioned, scalable to millions of executions.
Complete system Production-ready You need Airflow-class orchestration but want YAML flows, any language, and a UI non-Python people can use.
★ 30k Apache-2.0 Java Active, pushed today -
2
Meshery meshery
Meshery, the cloud native manager
Complete system Usable You run several Kubernetes clusters and want a visual, collaborative way to design and deploy configurations instead of editing YAML by hand.
★ 12k Apache-2.0 TypeScript Active, pushed today -
3
GoCD gocd
GoCD - Continuous Delivery server main repository
Complete system Production-ready You run complex multi-stage release pipelines across many dependent services and want to see the whole flow in one place.
★ 7.4k Apache-2.0 Java Active, pushed today
Frameworks and platforms to build on 6
-
1
AWS CDK aws
The AWS Cloud Development Kit is a framework for defining cloud infrastructure in code
Framework or platform Production-ready Everything you run is on AWS and you want typed, reusable infrastructure code that stays inside CloudFormation's deployment model.
★ 13k Apache-2.0 TypeScript Active, pushed today -
2
Encore encoredev
Infrastructure orchestration from local to your cloud
Framework or platform Usable You are starting a new backend and want infrastructure derived from application code instead of writing Terraform yourself.
★ 13k MPL-2.0 Go Active, pushed 2 days ago -
3
Crossplane crossplane
The Cloud Native Control Plane
Framework or platform Production-ready You already run Kubernetes and a platform team wants to offer self-service infrastructure through the Kubernetes API with continuous reconciliation.
★ 12k Apache-2.0 Go Active, pushed today -
4
Architect architect
The simplest, most powerful way to build a functional web app (fwa)
Framework or platform Usable You want a serverless web app on AWS with a simple manifest and offline local development, and you are happy staying on AWS.
★ 2.6k Apache-2.0 JavaScript Active, pushed 2 months ago -
5
Nitric nitrictech
Nitric is a multi-language framework for cloud applications with infrastructure from code.
Framework or platform Usable You want infrastructure inferred from backend code but need to keep the option of switching cloud providers.
★ 2k Apache-2.0 Go Active, pushed 12 days ago -
6
AWS Blocks aws-devtools-labs
Composable building blocks for full-stack AWS apps — define infrastructure and runtime code together with end-to-end type safety using TypeScript, local mocking, and native client codegen for Kotlin, Swift, and Dart.
Framework or platform Experimental You are building a full-stack app that will run on AWS and want backend and infrastructure defined together with end-to-end types.
★ 408 Apache-2.0 TypeScript Active, pushed today
Integrations 1
-
1
Infracost VS Code Extension infracost
See cost estimates for Terraform right in your editor💰📉
Integration Usable You already use Infracost and want engineers to see cost as they edit infrastructure code rather than only in pull requests.
★ 1.8k Apache-2.0 TypeScript Active, pushed yesterday
Developer tools 21
-
1
Terraform hashicorp
Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.
Developer tool Production-ready Your team provisions infrastructure across one or more cloud providers and wants it reviewed and versioned as code with the largest provider ecosystem available.
★ 50k See repository Go Active, pushed today
-
2
Trivy aquasecurity
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Developer tool Production-ready You want one free scanner in CI that covers container images, dependencies and infrastructure code instead of several separate tools.
★ 39k Apache-2.0 Go Active, pushed today -
3
OpenTofu opentofu
OpenTofu lets you declaratively manage your cloud infrastructure.
Developer tool Production-ready You want Terraform-style infrastructure management under an open-source licence, without HashiCorp's Business Source Licence.
★ 31k MPL-2.0 Go Active, pushed today
-
4
Pulumi pulumi
Pulumi - Infrastructure as Code in any programming language 🚀
Developer tool Production-ready Your engineers would rather write infrastructure in a general-purpose language with loops, functions and tests than learn HCL.
★ 26k Apache-2.0 Go Active, pushed today -
5
Salt saltstack
Software to automate the management and configuration of infrastructure and applications at scale.
Developer tool Production-ready You manage a large fleet of servers and need fast remote execution plus configuration management with an agent on each machine.
★ 16k Apache-2.0 Python Active, pushed today -
6
Infracost infracost
Cloud cost intelligence for engineers, AI coding agents, and CI/CD 💰📉 Shift FinOps Left!
Developer tool Production-ready Engineers change cloud infrastructure through pull requests and you want each change to show what it will cost before it merges.
★ 13k Apache-2.0 Go Active, pushed 2 days ago -
7
Checkov bridgecrewio
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Developer tool Production-ready You want a policy check on infrastructure code in CI with a large built-in rule set and custom rules in Python or YAML.
★ 9.1k Apache-2.0 Python Active, pushed 3 days ago -
8
Goss goss-org
Quick and Easy server testing/validation
Developer tool Usable You build server or container images and want fast, readable tests that the result has the right packages, ports and files.
★ 6k Apache-2.0 Go Active, pushed 4 days ago -
9
Digger diggerhq
Digger is an open source IaC orchestration tool. Digger allows you to run IaC in your existing CI pipeline ⚡️
Developer tool Usable You want Atlantis-style Terraform pull request automation without paying for a separate CI service or sharing cloud credentials with a third party.
★ 5.1k MIT Go Active, pushed 6 days ago -
10
DNSControl DNSControl
Infrastructure as code for DNS!
Developer tool Production-ready You manage many domains or more than one DNS provider and want record changes reviewed in git instead of clicked into dashboards.
★ 4k MIT Go Active, pushed yesterday -
11
octoDNS octodns
Tools for managing DNS across multiple providers
Developer tool Production-ready Your team prefers Python and YAML for DNS as code, or you need records mirrored across several providers.
★ 3.8k MIT Python Active, pushed 10 days ago -
12
Open Ontologies fabio-rovai
Plan, apply and roll back changes to a production ontology, with a blast radius report and a proof an auditor can re-check.
Developer tool Experimental You maintain a production OWL or RDF ontology and need reviewable change plans and machine-checkable evidence for auditors.
★ 2.8k MIT Rust Active, pushed yesterday -
13
KICS Checkmarx
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Developer tool Usable You want an open-source infrastructure code scanner whose rules are written in Open Policy Agent's Rego, so you can edit and add your own.
★ 2.7k Apache-2.0 Open Policy Agent Active, pushed today -
14
Driftctl snyk
Detect, track and alert on infrastructure drift
Developer tool Experimental Rarely now; consider it only for a one-off audit of unmanaged AWS resources against Terraform state.
★ 2.7k Apache-2.0 Go Active, pushed 14 days ago -
15
KCL kcl-lang
KCL Language Core and API
Developer tool Usable You maintain large Kubernetes or platform configurations and want typed schemas and validation beyond what Helm templates or Kustomize give.
★ 2.4k Apache-2.0 Rust Active, pushed today -
16
Terraboard camptocamp
:earth_africa: :clipboard: A web dashboard to inspect Terraform States
Developer tool Usable You have many Terraform states in remote backends and want a searchable read-only view across them.
★ 2k Apache-2.0 Go Active, pushed 5 days ago -
17
tfsec aquasecurity
Tfsec is now part of Trivy
Developer tool Usable Only when an existing pipeline still calls tfsec; new setups should use Trivy, which absorbed its checks.
★ 7.1k MIT Go Slowing, pushed 8 months ago -
18
TerraVision patrickchugh
Cloud architecture diagrams in both directions: AI prompt or JSON to diagram, diagram to Terraform via MCP server, and Terraform to diagram via CLI or CI/CD. Using Official AWS, Azure and GCP icons.
Developer tool Usable You want architecture diagrams that are regenerated from Terraform in CI instead of drawn and forgotten.
★ 1.7k AGPL-3.0 Python Active, pushed 5 days ago -
19
Stategraph stategraph
Terraform without the state file bottleneck
Developer tool Experimental Large Terraform states are slowing your team down through locking contention and you want pull request automation you can self-host.
★ 1.3k MPL-2.0 OCaml Active, pushed today -
20
Itamae itamae-kitchen
Configuration management tool inspired by Chef, but simpler and lightweight. Formerly known as Lightchef.
Developer tool Usable You know Ruby and want something lighter than Chef for provisioning a handful of servers.
★ 1.1k MIT Ruby Active, pushed 4 days ago -
21
tfui SayYoungMan
Interactive TUI for performing Terraform workflows
Developer tool Experimental You run Terraform from the terminal and want to browse large plans and watch apply progress resource by resource.
★ 217 MIT Go Slowing, pushed 5 months ago
Templates and starters 1
-
1
GOAD Orange-Cyberdefense
game of active directory
Template or starter Usable You are learning or training Active Directory penetration testing and want a realistic multi-domain lab on your own hardware or cloud account.
★ 8.6k GPL-3.0 PowerShell Active, pushed 13 days ago
Compared head to head
Open-source licenses
- Permissive: 26. Use it anywhere, including in closed products. You keep the copyright notice; Apache-2.0 also grants patent rights.
- Weak copyleft: 3. Changes to the licensed files must be shared, but you can link them into a closed program.
- Strong copyleft: 1. If you distribute the program or anything built on it, you must release the whole source under the same license.
- Network copyleft: 1. Like GPL, and running a changed version as a web service counts as distributing it, so its users get the source too.
Languages
Go 15, Python 4, TypeScript 4, Java 2, Rust 2, PowerShell 1, Open Policy Agent 1, JavaScript 1, OCaml 1 and Ruby 1.
Made software that belongs here? Add it. Listing is free.