Freedom251 › Continuous Integration Software
PikoCI

What PikoCI is
PikoCI is an open-source, self-hosted CI/CD system distributed as a single binary under the Apache 2.0 license. Pipelines are written in HCL and define resources, jobs, tasks, and explicit dependencies. The pikoci run command executes jobs locally with an in-memory database and worker, without starting a server or pushing changes. PikoCI supports in-memory, SQLite, MySQL, and PostgreSQL backends. SQLite and in-memory deployments are limited to one instance, while PostgreSQL or MySQL support multiple server instances. Separate workers can run apart from the server for distributed setups. Notifications include GitHub Checks, Slack, and Discord. Secrets may be encrypted at rest and masked in logs when a master key is configured, although the documentation says this is not a KMS or HSM substitute. Role-based access, approval gates, audit logs, OIDC single sign-on, pull-request checks, self-hosted runners, and caching are listed.
Who it suits
PikoCI fits teams that want free, open-source CI/CD they can host themselves on Linux or macOS. It suits users needing local pipeline runs, self-hosted workers, pull-request checks, and configurable database backends.
What it does well
- Apache 2.0 open-source license
- Local pipeline execution without a server
- Supports PostgreSQL and MySQL scaling
- Separate distributed workers
- GitHub Checks, Slack, and Discord notifications
What to know first
- No hosted option
- SQLite and in-memory backends are single-instance
- Secret encryption is not a KMS or HSM
- Concourse importer is only planned
Verdict
PikoCI provides a self-managed CI/CD foundation with HCL pipelines, local execution, and distributed worker options. Teams must operate the system themselves and account for the documented limits around scaling and secret protection.
Facts from PikoCI's own pages
- Access controls
- PikoCI documents team roles, OAuth/OIDC sign-in, API tokens, approval gates, and an audit log. · docs.pikoci.com, 11 Oct 2026
- Database support
- Documented database backends include in-memory, SQLite, MySQL, and PostgreSQL. · docs.pikoci.com, 11 Oct 2026
- Deployment
- PikoCI can start with an in-memory database and also supports SQLite, MySQL, and PostgreSQL backends. · docs.pikoci.com, 11 Oct 2026
- Downloads
- The getting-started guide provides Linux amd64 and macOS amd64 binaries, Linux packages, a Docker image, and source-build instructions. · docs.pikoci.com, 11 Oct 2026
- Integrations
- The built-in Git resource supports GitHub, GitLab, and Gitea/Forgejo, and built-in notifications include Slack, Discord, and GitHub Checks. · docs.pikoci.com, 11 Oct 2026
- License
- PikoCI is open source under the Apache 2.0 license. · pikoci.com, 11 Oct 2026
- Local execution
- The `pikoci run` command runs a pipeline job locally with an in-memory database and worker, without starting a server. · github.com, 11 Oct 2026
- Local runs
- The `pikoci run` command can run a pipeline job locally without a server or pushing changes. · pikoci.com, 11 Oct 2026
- Notable gap
- The Concourse migration guide says PikoCI has a smaller built-in resource registry and that a Concourse pipeline importer is planned. · docs.pikoci.com, 11 Oct 2026
- Pipelines
- Pipelines are defined in HCL and can use variables, resources, resource types, runners, services, and jobs. · docs.pikoci.com, 11 Oct 2026
- Product
- PikoCI is an open-source, self-hosted CI/CD system distributed as a single binary and licensed under Apache 2.0. · pikoci.com, 11 Oct 2026
- Public pipeline
- PikoCI's own public pipeline can be viewed without an account, including its build status, logs, and pipeline graph. · pikoci.com, 11 Oct 2026
- Public pipelines
- A pipeline can be made public so visitors can view its status without an account. · github.com, 11 Oct 2026
- Scaling limit
- SQLite and in-memory backends are single-instance only; multiple server instances are supported with PostgreSQL or MySQL. · docs.pikoci.com, 11 Oct 2026
- Secrets
- Stored secrets can be encrypted at rest and masked in build logs when a master key is configured. · docs.pikoci.com, 11 Oct 2026
- Security limit
- PikoCI's documentation says its secret encryption is not a substitute for a KMS or HSM, and anyone holding both the database and master key can access the secrets. · docs.pikoci.com, 11 Oct 2026
- Security limitation
- PikoCI’s documentation says master-key encryption is not a substitute for a KMS or HSM, and losing the master key means losing stored secrets. · docs.pikoci.com, 11 Oct 2026
- Support
- The product site links to a Discord community. · pikoci.com, 11 Oct 2026
- Workers
- PikoCI supports running workers separately from the server for distributed worker setups. · docs.pikoci.com, 11 Oct 2026
Where PikoCI stands on Freedom251
- Continuous Integration Software#40 of 58