Awesome GitHub RepositoriesProgrammatic Configuration Generation

Buildbot is a Python-based continuous integration framework and distributed build orchestrator. It functions as a build automation engine that coordinates the retrieval of source code, the execution of build steps, and the reporting of results through a central controller and a network of remote worker agents. The system is distinguished by a plugin-based extensibility architecture and a master-worker distribution model. It allows for dynamic build modification at runtime and supports a pluggable database backend for persisting system state and historical build data. The project covers a bro

Troposphere 是一个 Python 库，用于程序化创建和验证基础设施即代码模板。它作为 AWS CloudFormation 和 OpenStack 模板的生成器，允许将云资源定义为通用编程语言中的对象，而不是通过原始的 JSON 或 YAML 标记。 该项目专注于云资源验证，在模板构建过程中检查属性名称和数据类型。该系统在基础设施导出部署之前识别配置错误和缺失的必填字段。 该库涵盖了广泛的云基础设施建模，包括计算、存储、网络和安全资源的定义。它提供了将这些程序化定义的对象转换为结构化 JSON 或 YAML 导出格式的工具。

Dhall 是一种类型安全的配置语言，旨在创建保证能够终止的可编程配置文件。它是一种非图灵完备的语言，使用严格的类型系统来确保正确性并防止评估过程中的无限循环。 该项目作为一个确定性的配置引擎和编组工具，将可编程表达式转换为 JSON、YAML 和 Bash 等静态格式。它的特色在于专注于安全性和完整性，使用语义哈希来锁定远程导入，并强制执行源策略以防止数据泄露。 其功能涵盖了广泛的配置管理领域，包括使用多态函数、联合类型和记录补全来减少冗余。它提供了用于模式验证、远程表达式解析的工具，以及用于编辑器集成的语言服务器协议 (LSP) 实现。 该语言提供了一个命令行界面和一个用于评估表达式及验证等价性的 REPL。

DNSControl is an infrastructure-as-code tool designed to manage DNS records and zones across multiple providers through a unified, programmable configuration language. By treating DNS as code, it enables teams to maintain consistent infrastructure state, automate record updates, and perform version-controlled management of network settings across diverse cloud, registrar, and network DNS services. The system functions as a multi-provider orchestrator that uses a declarative reconciliation engine to compare local configurations against live remote states. It employs a provider-agnostic abstrac

Octelium is a zero-trust network access platform and identity-aware proxy designed to secure private HTTP, SSH, and SQL resources. It functions as a secure gateway that validates human and workload identities using OIDC, SAML, and FIDO2 passkeys before granting access to internal applications and SaaS APIs. The system is distinguished by its secretless access broker, which injects credentials—such as API keys, passwords, and AWS Sigv4 signatures—at the gateway level so users can access databases and cloud resources without managing secrets. It further specializes in AI gateway administration,