Functionalities & Organization
Gitrust unites the bricks of a modern GTA_001 Each function is designed to remain simple, auditable and without external dependence.
Glossary of Functionalities
Security memory
- Rust
- Base 100% Rust with
#![forbid(unsafe_code)] on critical crates. No indefinite behavior, no leaks exploitable. - Hardlints
deny(unwrap_used, expect_used, panic, indexing_slicing) applies to the entire code. Errors are geered, never escamotees.- Zero
- Secrets (tokens, hashs) implement the line
Zeroize : the memory is automatically erased from destruction. - SSH hardened
- Cles RSA >= 4096 imposed bits, low rejection algorithms, SHA256 fingerprints verified at each connection.
ANSSI PA-074
- Audit vendors
- Each dependency is traceable, versionnee and auditable via the Cargo Manifesto and the integrated
- Path traversal blocks
- Systematic validation of disk paths (
.., / and \. - Journalization
- Audit tracks on sensitive operations: creation, sharing, removal of deposit, turn of key, change of permission.
- Sovereign deployment
- A Rust archive, a No third party service, no external network calls.
- Zero CDN
- All assets (CSS, JS, fonts) are served locally. CSP strict blocking external domains.
- Zero telemetry
- There's no data anywhere else than in your own newspapers. The metrics stay at your place.
Collaboration
- Roles hierarchical
- Four clear roles: , , , . Actual permission = max(individual, team).
- Share Depots
- Individual or team sharing, with or without inheritance. Rights combine, never circumvent.
- Organizations
- Structure with isolation of namespaces and SSH keys.
Integration
- Native HTTP Git
- Complete HTTP Smart (clone, fetish, push) without proxy layer. Compatible with all standard Git customers.
- Native Git SSH
- SSH server integrated (port 2222 by default), public key authentication, fine hook management.
- Stretch hooks
- Extension points
pre-receive, post-receive, update to connect your CI pipelines, scanners, notifications. - Optional
- Native pipelines triggering on each push via the hook
post-receive. Reproducible, portable and versioned buildings rated depot. - Cohesive API
- REST Endpoints for automation (depot creation, key management, user invitation).
Observability and quality
- Automatic generation of the software nomenclature in the format of
- Vulnerability analysis
- Continuous integration with
- Structure logs
- JSON Logs exploitable by any aggregator (ELK, Loki, Graylog) without parser adaptation.
Developmental workflow
Ready to take over control of your code?
Gitrust is in progressive deployment. To access a demo, ask your questions or be accompanied on an ANSSI-conform integration, contact the team.