A collection of Docker-based developer tools for Git workflows and development automation. All tools run in isolated containers for platform independence.
This repository contains independent tools that can be used separately:
| Service | Description | Location |
|---|---|---|
| DevTools | Git & Python runtime container | ./devtools.sh |
| Dozzle | Docker container log viewer | services/dozzle/ |
Interactive container with Git, Python 3.14, and shell utilities for Git-based development workflows.
- Git Tools - Advanced Git commands, statistics, history rewriting, and automation
- GitHub Tools - Repository management, topics, archiving, and workflow triggers
- Python Environment - Full Python 3.14 with common libraries (GitPython, Click, Rich, etc.)
- Shell Utilities - curl, jq, yq, git-filter-repo, GitHub CLI, and more
- Platform Independent - Runs identically on Windows, macOS, and Linux
- Auto-configured - Git credentials from host, helpful aliases pre-installed
# Build the container
.\devtools.ps1 build
# Start interactive shell in current directory
.\devtools.ps1 shell
# Start shell in a specific project
.\devtools.ps1 shell C:\Projects\MyApp| Command | Description |
|---|---|
shell [PATH] |
Start interactive DevTools shell |
run <script> |
Run a script in the container |
build |
Build/rebuild DevTools container |
| Command | Description |
|---|---|
stats [PATH] |
Show repository statistics |
cleanup [PATH] |
Clean up branches and cache |
changelog |
Generate changelog from commits |
release |
Manage semantic versioning releases |
lfs-migrate |
Migrate repository to Git LFS |
history-clean |
Remove large files from git history |
branch-rename |
Rename git branches (local + remote) |
split-repo |
Split monorepo into separate repos |
rewrite-commits |
Rewrite commit messages (pattern-based) |
| Command | Description |
|---|---|
gh-create |
Create GitHub repository |
gh-topics |
Manage repository topics |
gh-archive |
Archive repositories by criteria |
gh-workflow |
Trigger GitHub Actions workflows |
gh-add-workflow |
Add workflow files to repositories |
gh-clean-releases |
Clean releases and tags |
gh-visibility |
Change repo visibility (public/private) |
gh-clone-org |
Clone all repos from organization |
gh-sync-forks |
Sync forked repos with upstream |
gh-fork-autosync |
Sync all forks in an org from upstream (topic-filtered) |
gh-pr-cleanup |
Clean stale PRs and branches |
gh-secrets-audit |
Audit secrets across repos |
gh-secrets-sync |
Sync local .env to repo secrets (push + prune obsolete) |
gh-labels-sync |
Sync labels between repos |
gh-dependabot-labels |
Sync labels from dependabot.yml |
gh-packages-cleanup |
Clean old package versions |
gh-branch-protect |
Manage branch protection rules |
| Command | Description |
|---|---|
git-mirror |
Mirror repo between Git servers |
git-contributors |
Show contributor statistics |
# Remove large files from history (requires git-filter-repo)
./devtools.sh history-clean --analyze # Show large files
./devtools.sh history-clean -s 50M --dry-run # Preview cleanup
# Rename branches (master → main)
./devtools.sh branch-rename --master-to-main # Full migration
./devtools.sh branch-rename old-name new-name # Custom rename
# Split monorepo into separate repos
./devtools.sh split-repo dir1,dir2 -o myorg # Split to GitHub
./devtools.sh split-repo services/api --submodule # Keep as submodule
# Rewrite commit messages (remove AI attributions, etc.)
./devtools.sh rewrite-commits --preset claude --dry-run
./devtools.sh rewrite-commits --preset ai-all
./devtools.sh rewrite-commits -p "TICKET-\d+:\s*" # Custom pattern# Create repository
./devtools.sh gh-create myrepo --public --init
./devtools.sh gh-create -o myorg myrepo -t "python,cli" --license MIT
# Manage topics across repos
./devtools.sh gh-topics -o myorg --analyze # Topic statistics
./devtools.sh gh-topics -o myorg --add python,api # Add to all repos
./devtools.sh gh-topics myorg/repo --sync cli,tool # Ensure topics exist
# Filter by fork status (combinable with --pattern)
./devtools.sh gh-topics -o myorg --fork --sync forked-repo --limit 1000
./devtools.sh gh-topics -o myorg --no-fork --list # Only own repos
# Archive inactive repositories
./devtools.sh gh-archive -o myorg --inactive 365 --dry-run
./devtools.sh gh-archive -o myorg --empty # Archive empty repos
./devtools.sh gh-archive myorg/old-repo # Archive single repo
# Trigger GitHub Actions
./devtools.sh gh-workflow myorg/repo --list # List workflows
./devtools.sh gh-workflow myorg/repo ci.yml # Trigger workflow
./devtools.sh gh-workflow myorg/repo deploy.yml -i env=prod --wait
# Add workflow files to repos
./devtools.sh gh-add-workflow -o myorg --topic api -f ci.yml
./devtools.sh gh-add-workflow myorg/repo -f deploy.yml --skip-existing
# Clean releases and tags
./devtools.sh gh-clean-releases myorg/repo --list # List releases/tags
./devtools.sh gh-clean-releases myorg/repo --all --dry-run
./devtools.sh gh-clean-releases -o myorg --topic old --prereleases
# Change repository visibility
./devtools.sh gh-visibility myorg/repo --public
./devtools.sh gh-visibility -o myorg --topic open-source --public --dry-run
./devtools.sh gh-visibility -o myorg --current private --list# Clone all repos from organization
./devtools.sh gh-clone-org myorg -o ~/backup/myorg
./devtools.sh gh-clone-org myorg -t python --shallow # Only Python repos
./devtools.sh gh-clone-org myorg --pull # Update existing clones
# Sync forked repos with upstream
./devtools.sh gh-sync-forks --list # Show fork status
./devtools.sh gh-sync-forks myuser/my-fork # Sync single fork
./devtools.sh gh-sync-forks --all --behind # Sync all behind forks
# Keep a whole org of forks current (no workflow needed in the forks)
./devtools.sh gh-fork-autosync -o myorg --topic forked-repo --dry-run
./devtools.sh gh-fork-autosync -o myorg --topic forked-repo
./devtools.sh gh-fork-autosync -o myorg --repo MyFork # Single repo
#
# Two stages per repo: the mirror branch (named like the upstream default) is
# synced via the merge-upstream API; if the fork's own default branch differs,
# the mirror is merged forward server-side. Conflicts open an issue in the
# affected repo. Runs daily via .github/workflows/fork-autosync.yml.
# Clean stale PRs and branches
./devtools.sh gh-pr-cleanup myorg/repo --list --stale-days 30
./devtools.sh gh-pr-cleanup myorg/repo --close-stale --stale-days 60
./devtools.sh gh-pr-cleanup myorg/repo --delete-merged-branches
# Audit secrets across repos
./devtools.sh gh-secrets-audit -o myorg # Audit all repos
./devtools.sh gh-secrets-audit -o myorg --compare # Compare coverage
./devtools.sh gh-secrets-audit myorg/repo --all # Include Dependabot/envs
# Sync local .env to repo secrets (push + prune obsolete)
./devtools.sh run gh-secrets-sync.py --dry-run # Preview plan
./devtools.sh run gh-secrets-sync.py # Apply (prompts before deletions)
./devtools.sh run gh-secrets-sync.py --yes # Apply without prompt (CI)
./devtools.sh run gh-secrets-sync.py -R owner/repo # Target a different repo
# Sync labels between repos
./devtools.sh gh-labels-sync source/repo target/repo
./devtools.sh gh-labels-sync --preset standard myorg/repo
./devtools.sh gh-labels-sync source/repo --export > labels.json
# Manage branch protection
./devtools.sh gh-branch-protect myorg/repo --list
./devtools.sh gh-branch-protect myorg/repo main --preset strict
./devtools.sh gh-branch-protect --org myorg --branch main --preset standard
# Sync dependabot labels across repos
./devtools.sh gh-dependabot-labels # Dry run
./devtools.sh gh-dependabot-labels --execute # Create labels
./devtools.sh gh-dependabot-labels --execute --cleanup # Also remove old labels
# Clean old package versions
./devtools.sh gh-packages-cleanup # Dry run
./devtools.sh gh-packages-cleanup --execute # Delete old versions
./devtools.sh gh-packages-cleanup -t container # Only containers# Mirror repo between servers
./devtools.sh git-mirror source.git target.git
./devtools.sh git-mirror source.git target.git --force --lfs
./devtools.sh git-mirror source.git target.git --wiki
# Contributor statistics
./devtools.sh git-contributors # Current repo
./devtools.sh git-contributors --since "30 days ago"
./devtools.sh git-contributors --detailed --activity
./devtools.sh git-contributors --json > contributors.jsonShell Scripts:
git-stats.sh- Comprehensive repository statisticsgit-cleanup.sh- Clean up merged/stale branchesgit-lfs-migrate.sh- LFS migration with 100+ file patternsgit-history-clean.sh- Remove large files from historygit-branch-rename.sh- Rename branches with remote syncgit-mirror.sh- Mirror repositories between Git serversgh-create-repo.sh- Create GitHub repositoriesgh-trigger-workflow.sh- Trigger GitHub Actionsgh-clone-org.sh- Clone all repos from organizationhelp-devtools- Show all available commands
Python Tools:
git-changelog.py- Generate changelog from commitsgit-release.py- Semantic versioning release managergit-split-repo.py- Split monorepo into separate reposgit-rewrite-commits.py- Pattern-based commit message rewritinggit-contributors.py- Contributor statistics with activity patternsgh-topic-manager.py- Manage repository topicsgh-archive-repos.py- Archive repositories by criteriagh-add-workflow.py- Add workflow files to reposgh-clean-releases.py- Clean releases and tagsgh-visibility.py- Change repository visibilitygh-sync-forks.py- Sync forked repos with upstreamgh-pr-cleanup.py- Clean stale PRs and branchesgh-secrets-audit.py- Audit secrets across reposgh-secrets-sync.py- Sync local.envto repo secrets (push + prune obsolete, allowlisted via.env.example)gh-labels-sync.py- Sync labels between reposgh-dependabot-labels.py- Sync labels from dependabot.ymlgh-packages-cleanup.py- Clean old package versionsgh-branch-protection.py- Manage branch protection rules
Pre-configured Git Aliases:
| Alias | Command |
|---|---|
git st |
status -sb |
git lg |
Log graph (20 commits) |
git lga |
Full log graph, all branches |
git branches |
List branches by date |
git last |
Show last commit |
git undo |
Soft reset last commit |
git amend |
Amend last commit |
# Repository statistics
./devtools.sh stats
# Clean up branches (preview)
./devtools.sh cleanup --dry-run
# Generate changelog
./devtools.sh run "git-changelog.py -o CHANGELOG.md"
# Interactive release
./devtools.sh release release
# Migrate to LFS
./devtools.sh lfs-migrate --dry-run
./devtools.sh lfs-migrate --pushSome tools operate on the host machine and its filesystem rather than inside
the container. They live in scripts/, run with the host's Python (runtime: python
in tools.json), and need their dependencies installed on the host:
pip install -r scripts/requirements.txt| Command | Description |
|---|---|
ghcr-token |
Validate a classic ghcr.io pull PAT across all orgs and emit Docker login commands |
repo-mirror |
Snapshot a folder tree of git repos to JSON and restore/update it 1:1 elsewhere |
claude-backup |
Backup / restore Claude Code configuration |
Run them via devtools.cmd <command> on Windows, or directly with Python on any
platform (Windows / Linux / macOS):
python scripts/repo-mirror.py scan -o repos.jsonProvisions the credential Docker needs to pull private and internal images
from ghcr.io across every organization you belong to.
devtools ghcr-token # guided: create, validate, emit login commands
devtools ghcr-token --execute # same, and log this host in as well
devtools ghcr-token doctor # validate $GHCR_PAT, change nothing
devtools ghcr-token emit --target serverghcr.io accepts only classic PATs — fine-grained PATs and GitHub App tokens
are rejected. Because a classic PAT's scopes are account-wide, one token covers
every org you are a member of. The tool cannot create it (GitHub has no API for
that), so it opens the prefilled page and takes the paste-back.
What it does that a bare docker login cannot: it proves the credential against
the registry, per organization, before logging in. docker login prints
Login Succeeded even for tokens ghcr.io will never accept — the failure only
surfaces later as docker pull … denied.
See scripts/ghcr-token.md for the Kubernetes, Swarm and Podman recipes, the rotation runbook and the troubleshooting table.
Captures every repository under a root (default C:\Projects on Windows, current
directory elsewhere) — including nested independent sub-repos and submodules —
into one JSON manifest, then recreates that tree 1:1 on another machine.
# Source machine: analyse the tree and write the manifest
python scripts/repo-mirror.py scan -o repos.json
# Target machine: recreate folders, clone what's missing, fast-forward the rest
python scripts/repo-mirror.py restore -i repos.json
python scripts/repo-mirror.py restore -i repos.json --dry-run # preview, touch nothing
# Configurable excludes (by folder name OR relative path)
python scripts/repo-mirror.py scan -x 'Archive*' -x 'eCommerce/legacy'Existing repos are only ever fast-forwarded; anything with local changes, a
detached HEAD or no upstream is left untouched. Submodules are restored via
--recurse-submodules and refreshed with submodule update --init --recursive.
See scripts/repo-mirror.md for the full reference.
Independent Docker container log viewer. See services/dozzle/README.md for details.
cd services/dozzle
cp .env.example .env
./scripts/dozzle.sh startThis repository runs its own maintenance scripts against the bauer-group
organization weekly (Sunday 06:00 UTC) and on demand via workflow_dispatch,
through the devtools-automation
workflow.
Operations and the token security model — PAT scopes, the automation
environment, the main-only branch restriction, and shell-injection hardening —
are documented in services/devtools/AUTOMATION.md.
DeveloperTools/
├── devtools.sh # DevTools CLI (Linux/macOS)
├── devtools.ps1 # DevTools CLI (Windows PowerShell)
├── devtools.cmd # DevTools CLI (Windows CMD)
│
├── services/
│ ├── devtools/ # DevTools Runtime Container
│ │ ├── Dockerfile
│ │ ├── entrypoint.sh
│ │ ├── requirements.txt
│ │ ├── AUTOMATION.md # Scheduled automation: ops & security model
│ │ ├── config/ # prefix-labels.json (+ schema)
│ │ └── scripts/
│ │ ├── git-stats.sh
│ │ ├── git-cleanup.sh
│ │ ├── git-changelog.py
│ │ ├── git-release.py
│ │ ├── git-lfs-migrate.sh
│ │ ├── git-history-clean.sh
│ │ ├── git-branch-rename.sh
│ │ ├── git-split-repo.py
│ │ ├── git-rewrite-commits.py
│ │ ├── gh-create-repo.sh
│ │ ├── gh-topic-manager.py
│ │ ├── gh-archive-repos.py
│ │ ├── gh-trigger-workflow.sh
│ │ ├── gh-add-workflow.py
│ │ ├── gh-clean-releases.py
│ │ ├── gh-visibility.py
│ │ ├── gh-clone-org.sh
│ │ ├── gh-sync-forks.py
│ │ ├── gh-pr-cleanup.py
│ │ ├── gh-secrets-audit.py
│ │ ├── gh-labels-sync.py
│ │ ├── gh-dependabot-labels.py
│ │ ├── gh-packages-cleanup.py
│ │ ├── gh-branch-protection.py
│ │ ├── git-mirror.sh
│ │ ├── git-contributors.py
│ │ └── help-devtools.sh
│ │
│ └── dozzle/ # Container Monitor (independent)
│ ├── docker-compose.yml
│ ├── .env.example
│ ├── README.md
│ ├── data/
│ │ └── users.yml.example
│ └── scripts/
│ ├── dozzle.sh
│ └── dozzle.ps1
│
├── scripts/ # Host-side tools & generators (run on host Python)
│ ├── ghcr-token.py # ghcr.io pull credential: validate + emit login commands
│ ├── repo-mirror.py # Mirror a folder tree of git repos across machines
│ ├── claude-backup.py # Backup/restore Claude Code config
│ ├── requirements.txt # Host tool dependencies (rich)
│ ├── generate-tools-json.ps1
│ └── generate-cmd.ps1
│
└── .github/ # CI/CD workflows
-
Add scripts to
services/devtools/scripts/with metadata header:#!/bin/bash # @name: my-tool # @description: Short description of the tool # @category: git|github # @usage: my-tool [options]
-
Add Python dependencies to
services/devtools/requirements.txtif needed -
Regenerate the manifest:
.\scripts\generate-tools-json.ps1 -
Rebuild the container:
devtools build -
The tool is automatically discovered by
help-devtools
For tools that act on the host filesystem (like repo-mirror, claude-backup):
- Add the script to
scripts/(e.g.scripts/my-tool.py) - Register it in
tools.jsonunder thelocalcategory with"runtime": "python" - Add any host dependencies to
scripts/requirements.txt - Regenerate the launcher:
.\scripts\generate-cmd.ps1— this routes the command topython scripts\my-tool.py(native, no container)
- Docker Desktop (Windows/macOS) or Docker Engine (Linux)
- Docker Compose v2+ (for Dozzle)
- GitHub CLI (
gh) for GitHub tools (installed in container)
MIT