readystack/woodpecker repository overview

⁠Woodpecker CI

readystack/woodpecker:v3.15.0-CE-ubuntu24.04-r1

A hardened, cosign-signed, offline-rebuildable build of github.com/woodpecker-ci/woodpecker v3.15.0 (Apache-2.0), built clean-room from official upstream source by ReadyStack⁠.

⁠What you get

• Docker Scout Grade A — all 8 default policies pass, 0 fixable Critical/High.
• Signed — cosign signature by the ReadyStack release key; verify with cosign verify --key <(curl -fsSL https://readystack.dev/keys/cosign.pub) readystack/woodpecker:v3.15.0-CE-ubuntu24.04-r1.
• Built from source, non-root, on the current toolchain.

⁠Pulling

docker pull readystack/woodpecker:v3.15.0-CE-ubuntu24.04-r1

⁠Deployment

Single container running the Woodpecker SERVER (web UI + API + gRPC). State in an embedded SQLite database. Connects to a git forge (GitHub/Gitea/GitLab) and to one or more agents (run separately) that execute pipelines.

docker run -d --name woodpecker -p 8000:8000 -p 9000:9000 -e WOODPECKER_HOST=... -e WOODPECKER_GITHUB=true -e WOODPECKER_GITHUB_CLIENT=... -e WOODPECKER_GITHUB_SECRET=... -e WOODPECKER_AGENT_SECRET=... -v wp-data:/var/lib/woodpecker readystack/woodpecker:v3.15.0-CE-ubuntu24.04-r1

⁠The full ReadyStack Agent-ready Archive

The complete --network=none build kit to recreate this exact image yourself — plus admin/DB/API handbooks, seed data, a validated test suite, and signed provenance — is at readystack.dev/buy.html⁠.

— ReadyStack · readystack.dev