CI/CD for your OpenTofu infrastructure.
Push, plan, review, apply — on runners you control. Self-hosted, git-driven, with credentials that live and die with each run.
Git-driven
A push to a tracked branch plans automatically. Pull requests get preview plans. Promote a PR to apply it.
Run anywhere
Runners are ephemeral and live where you want them: a local process, Docker, Kubernetes, or your own GitHub Actions — zero extra infra.
Credentials that expire
Every run gets short-lived, prefix-scoped credentials minted at start and gone at finish. Nothing static is ever shipped to a runner.
Yours to host
One backend binary with the UI embedded, PostgreSQL, and S3. SSO and RBAC built in. No SaaS dependency.
Find your path
- I'm evaluating GantryCD What it is, how it compares, and the security model. What is GantryCD? →
- I'm using an instance Create a stack, trigger a deployment, review and apply a plan. Using GantryCD →
- I'm running my own Install the backend, configure storage, wire up SSO. Operating →
- I'm building on it The codebase map, the boundaries, and the extension points. Developer guide →