securegit 0.7.1

Zero-trust git replacement with 12 built-in security scanners, universal undo, durable backups, and a 37-tool MCP server
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118

[package]
name = "securegit"
version = "0.7.1"
edition = "2021"
description = "Zero-trust git replacement with 12 built-in security scanners, universal undo, durable backups, and a 37-tool MCP server"
license = "MIT OR Apache-2.0"
authors = ["ArmyKnife Labs"]
repository = "https://gitlab.com/armyknifelabs-tools/securegit"
homepage = "https://gitlab.com/armyknifelabs-tools/securegit"
rust-version = "1.75"
readme = "README.md"
keywords = ["security", "git", "scanning", "supply-chain", "devtools"]
categories = ["command-line-utilities", "development-tools"]
exclude = ["docs/plans/", "exercises/", "scripts/", ".github/", ".mcp.json", "tests/"]

[[bin]]
name = "securegit"
path = "src/main.rs"

[[bin]]
name = "securegit-mcp"
path = "src/bin/securegit_mcp.rs"

[features]
default = ["native-plugins"]
gitoxide = ["gix"]
native-plugins = ["libloading"]
wasm-plugins = ["wasmtime"]

[dependencies]
# CLI
clap = { version = "4", features = ["derive", "env"] }
console = "0.15"
indicatif = "0.17"
dialoguer = "0.11"

# Async
tokio = { version = "1", features = ["full"] }
async-trait = "0.1"
futures = "0.3"

# Serialization
serde = { version = "1", features = ["derive"] }
serde_json = "1"
toml = "0.8"

# Git - Pure Rust (preferred)
gix = { version = "0.66", optional = true, features = ["blocking-network-client"] }

# Git - libgit2 bindings (fallback)
git2 = "0.19"

# HTTP
reqwest = { version = "0.12", features = ["json", "stream", "rustls-tls"], default-features = false }

# Archives
zip = { version = "2", features = ["deflate"] }
tar = "0.4"
flate2 = "1"
bzip2 = "0.5"
xz2 = "0.1"

# Security scanning
regex = "1"
aho-corasick = "1"
memchr = "2"
lazy_static = "1"

# Plugin system
libloading = { version = "0.8", optional = true }
wasmtime = { version = "26", optional = true }

# Platform integration
open = "5"
chrono = { version = "0.4", features = ["serde"] }

# Utilities
sha2 = "0.10"
sha1 = "0.10"
hex = "0.4"
walkdir = "2"
tempfile = "3"
dirs = "5"
which = "6"

# Error handling
thiserror = "2"
anyhow = "1"

# Token tracking
rusqlite = { version = "0.31", features = ["bundled"] }

# MCP Server
rmcp = { version = "0.16", features = ["server", "transport-io"] }
schemars = "1"

# Logging
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter", "json"] }

[dev-dependencies]
criterion = "0.5"
assert_cmd = "2"
predicates = "3"
tempfile = "3"
mockito = "1"
serial_test = "3"

[profile.release]
opt-level = 3
lto = true
codegen-units = 1
strip = true
panic = "abort"

[profile.dev]
opt-level = 0
debug = true