securegit 0.8.5

Zero-trust git replacement with 12 built-in security scanners, LLM redteam bridge, universal undo, durable backups, and a 50-tool MCP server
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90

use crate::cli::UI;
use crate::core::SanitizeConfig;
use crate::git::GitSanitizer;
use anyhow::Result;
use std::path::PathBuf;

pub async fn execute(path: PathBuf, dry_run: bool, backup: bool, ui: &UI) -> Result<()> {
    ui.header("Sanitization");
    ui.blank();

    let git_dir = if path.ends_with(".git") {
        path.clone()
    } else {
        path.join(".git")
    };

    if !git_dir.exists() {
        anyhow::bail!("Not a git repository: {}", path.display());
    }

    ui.field("Repository", path.display());
    ui.field("Git dir", git_dir.display());
    ui.blank();

    if dry_run {
        ui.warning("DRY RUN - No changes will be made");
        ui.blank();
    }

    if backup && !dry_run {
        let backup_path = git_dir.with_extension("git.bak");
        ui.info(format!("Creating backup: {}", backup_path.display()));
        copy_dir_recursive(&git_dir, &backup_path)?;
        ui.success(format!("Backup created: {}", backup_path.display()));
    }

    let sanitizer = GitSanitizer::new(SanitizeConfig::default());

    if !dry_run {
        let report = sanitizer.sanitize(&git_dir)?;

        ui.result_banner(
            true,
            "Sanitization complete",
            &[
                ("Hooks removed", report.removed_hooks.len().to_string()),
                (
                    "Config keys removed",
                    report.removed_config_keys.len().to_string(),
                ),
                (
                    "Config sections removed",
                    report.removed_config_sections.len().to_string(),
                ),
            ],
        );

        if !report.warnings.is_empty() {
            ui.section("Warnings:");
            for warning in &report.warnings {
                ui.warning(warning);
            }
        }
    } else {
        ui.info(format!("Would sanitize: {}", git_dir.display()));
    }

    ui.blank();
    Ok(())
}

fn copy_dir_recursive(src: &std::path::Path, dst: &std::path::Path) -> anyhow::Result<()> {
    std::fs::create_dir_all(dst)?;
    for entry in walkdir::WalkDir::new(src)
        .into_iter()
        .filter_map(|e| e.ok())
    {
        let rel = entry
            .path()
            .strip_prefix(src)
            .map_err(|e| anyhow::anyhow!("Failed to compute relative path: {}", e))?;
        let target = dst.join(rel);
        if entry.file_type().is_dir() {
            std::fs::create_dir_all(&target)?;
        } else {
            std::fs::copy(entry.path(), &target)?;
        }
    }
    Ok(())
}