PikoCI

What it does

Access controls

PikoCI documents team roles, OAuth/OIDC sign-in, API tokens, approval gates, and an audit log.checked 11 Oct 2026

Database support

Documented database backends include in-memory, SQLite, MySQL, and PostgreSQL.checked 11 Oct 2026

Deployment

PikoCI can start with an in-memory database and also supports SQLite, MySQL, and PostgreSQL backends.checked 11 Oct 2026

Downloads

The getting-started guide provides Linux amd64 and macOS amd64 binaries, Linux packages, a Docker image, and source-build instructions.checked 11 Oct 2026

Integrations

The built-in Git resource supports GitHub, GitLab, and Gitea/Forgejo, and built-in notifications include Slack, Discord, and GitHub Checks.checked 11 Oct 2026

License

PikoCI is open source under the Apache 2.0 license.checked 11 Oct 2026

Local execution

The `pikoci run` command runs a pipeline job locally with an in-memory database and worker, without starting a server.checked 11 Oct 2026

Local runs

The `pikoci run` command can run a pipeline job locally without a server or pushing changes.checked 11 Oct 2026

Notable gap

The Concourse migration guide says PikoCI has a smaller built-in resource registry and that a Concourse pipeline importer is planned.checked 11 Oct 2026

Pipelines

Pipelines are defined in HCL and can use variables, resources, resource types, runners, services, and jobs.checked 11 Oct 2026

Product

PikoCI is an open-source, self-hosted CI/CD system distributed as a single binary and licensed under Apache 2.0.checked 11 Oct 2026

Public pipeline

PikoCI's own public pipeline can be viewed without an account, including its build status, logs, and pipeline graph.checked 11 Oct 2026

Public pipelines

A pipeline can be made public so visitors can view its status without an account.checked 11 Oct 2026

Scaling limit

SQLite and in-memory backends are single-instance only; multiple server instances are supported with PostgreSQL or MySQL.checked 11 Oct 2026

Secrets

Stored secrets can be encrypted at rest and masked in build logs when a master key is configured.checked 11 Oct 2026

Security limit

PikoCI's documentation says its secret encryption is not a substitute for a KMS or HSM, and anyone holding both the database and master key can access the secrets.checked 11 Oct 2026

Security limitation

PikoCI’s documentation says master-key encryption is not a substitute for a KMS or HSM, and losing the master key means losing stored secrets.checked 11 Oct 2026

Support

The product site links to a Discord community.checked 11 Oct 2026

Workers

PikoCI supports running workers separately from the server for distributed worker setups.checked 11 Oct 2026