Drydockdrydock.codeswhat.com

Komodo vs Drydock

Komodo is a broad DevOps platform with CI/CD, GitOps, and container management. Drydock focuses specifically on safe container update monitoring with rollback, maintenance windows, security scanning, and the widest registry and notification coverage.

Komodo — ActiveDrydock — Active

Feature Comparison

A side-by-side look at what each tool offers.

FeatureKomodoDrydock
Project statusActively maintainedActively maintained
LanguageRust + TypeScriptTypeScript
Web UIYesYes
Image update detectionYesYes
Auto-update containersYesYes (monitor-first)
Automatic rollbackNoYes, on health check failure
Maintenance windowsNoYes
Lifecycle hooks (pre/post)NoYes, with timeout & abort
Image backupNoPre-update backup with retention
Security scanning (Trivy)NoTrivy + SBOM + cosign verification
Registry providersLimited23 dedicated integrations
Notification servicesSlack, Discord, webhooks20 native trigger integrations
MQTT / Home AssistantNoYes
OIDC / SSOYesYes (Authelia, Auth0, Authentik)
Passkey / TOTP 2FAYesPlanned
CI/CD pipelinesYesNo (webhook API for CI/CD)
TypeScript scriptingYes (Actions)Planned
TOML GitOps configYesPlanned (YAML)
CLI toolYesPlanned
Prometheus metricsNoFull /metrics endpoint + Grafana template
Audit logNoYes, with REST API
Dry-run previewNoYes
LicenseGPL-3.0AGPL-3.0

Key Differentiators

Where Drydock goes beyond what Komodo offers.

Update Safety Controls

Drydock is the only tool with automatic rollback on health check failure, maintenance windows, and pre/post-update lifecycle hooks. Komodo can update containers but lacks these safety primitives.

Security Scanning

Trivy vulnerability scanning, SBOM generation (CycloneDX & SPDX), and cosign image signature verification — built-in. Komodo has no integrated security scanning.

Dry-Run Preview

Preview exactly what an update will do before applying it, with pre-update image backups and configurable retention. Komodo applies updates immediately with no preview step.

23 Registry Providers

Dedicated integrations for Docker Hub, GHCR, ECR, GCR, GAR, GitLab, Quay, Harbor, Artifactory, Nexus, and more. Komodo supports fewer registries out of the box.

20 Notification Services

Slack, Discord, Telegram, Teams, Matrix, SMTP, MQTT, Kafka, Gotify, NTFY, and more. Komodo's notification options are more limited.

Fully Open Source

Every Drydock feature is free and open source. Both Drydock (AGPL-3.0) and Komodo (GPL-3.0) use copyleft licenses.

Considering Komodo?

Komodo and Drydock serve different needs. If you want safe, monitored container updates with rollback and security scanning, Drydock is purpose-built for that. One Docker command to get started.

Quick start
$ docker run -d \
  --name drydock \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -p 3000:3000 \
  codeswhat/drydock

Ready to try Drydock?

Open source, AGPL-3.0 licensed, and actively maintained.