Engineering that helps teams ship.
Magma Moose is a development studio. We take on platform, cloud, network and security engineering for teams that ship, and we build open-source developer tools of our own, like Diatreme for releases, Chargate and Brimyr for gating what a pull request changes, and Draventis for testing what you deployed.
What we do, and what we give away.
Services
platform, cloud, network & security engineering
Hands-on, from architecture to production. We make your systems faster, safer and more reliable. Run it end to end for you, or alongside the engineers you already have.
Diatreme
● live
release orchestration
One GitHub Action for the whole release spine: semantic versioning, releases and changelogs, signed release commits, provenance-verified Docker promotion, and CycloneDX SBOMs. The same workflow for any versioning tool, on GitHub.com or Enterprise.
- uses: MagmaMoose/diatreme@v2 with: environment: prod environments: '["prod"]'
Chargate
● live
security & lint gating
A security and lint gate built on MegaLinter that fails a pull request only on the findings it introduces. Pre-existing findings never block, and the full SARIF always ships to DefectDojo, Dependency-Track or the GitHub Security tab.
- uses: magmamoose/chargate@v2 with: fail_on: high # net-new only
Brimyr
● live
patch-coverage gating
Point it at any repo: it detects the ecosystem, runs your tests with coverage, and gates the pull request on the coverage of the lines it changed. Legacy debt never blocks. Chargate's twin, quality assurance to its security.
- uses: magmamoose/brimyr@v1 with: threshold: '80' # patch coverage
Draventis
● early
scheduled security testing
The offensive-security half. Static analysis reads your code; Draventis tests what you actually deployed. OWASP ZAP and Nuclei run against your running targets on a schedule, and the findings land in DefectDojo.
defaults: policy: baseline # prod-safe schedule: nightly
Take the tools. Keep the change.
Diatreme, Chargate, Brimyr and Draventis are open source and Apache-2.0 licensed.
Open at the core
Every Magma Moose tool is open source and free to run. Read it, fork it, trust it. No key required to ship with it in production.
Built because we wanted them
Our open-source tools fill gaps we kept running into in the industry, things we wanted and could not find. We build them to our own standard and give them away.
Nothing held back
The open-source version is the whole tool. No features fenced off, no trial clock, no paid tier waiting to unlock what you already need.
Built in the open. Follow the forge.
Diatreme, Chargate, Brimyr and Draventis are free and open today. And when you want your platform faster, safer and more reliable, that is what we do best.