buphathe oxpecker on your repo's back

headless CI — push in, status out, on a Linux box with Git

Push → status in seconds

HMAC-verified webhooks, delivery dedup, honest pending/success/cancelled statuses — no YAML, no queue wait

first run

no runner minutes; build caches on your own disk or your S3/R2/minio via sccache

cache backends

latest-wins for CI gates, bounded FIFO for releases — per repo; superseded shas never silently drop

queue semantics

🌳

every run is an isolated git worktree of the pushed sha — never a shared, dirty checkout

runner (dagger | shell | ssh), tunnel (cloudflared | direct | none), trigger + status — swap via config or a new adapter crate

architecture

env var → OS keyring → 0600 env file; config holds names, never values; tokens never reach argv

setup