Depot vs Skaffold

Depot provides software delivery tools spanning source control, builds, CI runners, sandboxes, caches, and registries. Its container build service is a drop-in replacement for Docker builds, with persistent caching and native x86 and Arm support. Depot CI runs existing GitHub Actions workflows as a programmable, debuggable CI service, while Depot Registry is an OCI-compliant registry for builds, pull-through caching, and other artifacts. Integrations include GitHub Actions, CircleCI, GitLab CI, Google Cloud Build, Travis CI, Bitbucket Pipelines, Buildkite, Jenkins, and AWS CodeBuild. Cache integrations cover Bazel, Go, Gradle, Maven, Pants, sccache, Nx, and Turborepo. Each build and CI run is isolated in a dedicated virtual machine. Depot says communications use TLS and storage is encrypted at rest; it also identifies SOC 2 Type 2 compliance and time-bound, permission-based debugging access. Plans start at $20 a month, billed monthly, with a 7-day trial and no free plan. Developer includes community support; Business includes Slack Connect support.

Skaffold is Google’s open-source project for building, pushing and deploying applications. It runs client-side and has no component installed on a cluster. In development mode, it watches source files and can rebuild images, synchronize files, test images and redeploy when changes are detected. Its command-line interface can build, test, render, apply, deploy and clean application artifacts. Listed capabilities include policy-based image tagging, resource port-forwarding, logging and file syncing. Builder integrations include Docker, Jib, Bazel, custom builders, Buildpacks and ko. Deployment options include kubectl, kpt, Helm, Docker, Google Cloud Run, Kustomize and Render. Cloud Code provides extensions for Visual Studio Code and JetBrains IDEs. Skaffold supports Linux, macOS and Windows and is listed at free as an open-source project with standalone CLI and IDE integrations. It checks Google servers for updates by default, although that check can be disabled. Installation documentation says anonymized usage data is collected with an opt-out. Its gRPC server is not compatible with HTTPS.