Improving Git protocol security on GitHub

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

Our great sponsors
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • WorkOS - The modern identity platform for B2B SaaS
  • SaaSHub - Software Alternatives and Reviews
  • Vault

    A tool for secrets management, encryption as a service, and privileged access management

  • >I'd love a ssh key management solution that doesn't drive me bonkers

    Kinda in the same boat here, taken a glance at Vault [1] but it seems like something that I'd probably spend more time figuring out than get benefit from it given my relatively small footprint.

    Definitely have a lot more ssh authorized_hosts entries lingering around from old systems than I'm happy about.

    [1] https://www.vaultproject.io/

  • Killed by Google

    Part guillotine, part graveyard for Google's doomed apps, services, and hardware.

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • gitbrute

    brute-force a git commit hash

  • Not sure what you are asking, but it is trivially easy to fake a git hash to whatever you like.

    I cloned this repo: https://github.com/bradfitz/gitbrute

    Ran the command in the readme (had to do it twice for some reason) and the latest commit is now 000001 on my fork of the repo: https://github.com/Genbox/gitbrute/commit/0000019075dabc337f...

  • gitbrute

    Discontinued brute-force a git commit hash (by Genbox)

  • Not sure what you are asking, but it is trivially easy to fake a git hash to whatever you like.

    I cloned this repo: https://github.com/bradfitz/gitbrute

    Ran the command in the readme (had to do it twice for some reason) and the latest commit is now 000001 on my fork of the repo: https://github.com/Genbox/gitbrute/commit/0000019075dabc337f...

  • git-credential-manager

    Secure, cross-platform Git credential storage with authentication to GitHub, Azure Repos, and other popular Git hosting services.

  • Using username/PAT works with https://, not git://.

    An easier route might be GCM Core (https://github.com/microsoft/Git-Credential-Manager-Core). And of course, disclosure, I'm the product manager for GCM Core and author of this blog post.

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts