securegit 0.8.5

Zero-trust git replacement with 12 built-in security scanners, LLM redteam bridge, universal undo, durable backups, and a 50-tool MCP server
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60

use crate::cli::UI;
use anyhow::Result;
use std::path::Path;

pub fn execute(path: &Path, bare: bool, initial_branch: Option<&str>, ui: &UI) -> Result<()> {
    let repo = if bare {
        git2::Repository::init_bare(path)?
    } else {
        git2::Repository::init(path)?
    };

    // Set initial branch name if specified
    if let Some(branch) = initial_branch {
        let refname = format!("refs/heads/{}", branch);
        repo.reference_symbolic("HEAD", &refname, true, "securegit init: set initial branch")?;
    }

    // Set secure defaults
    let mut config = repo.config()?;
    let _ = config.set_bool("core.fsmonitor", false);
    let _ = config.set_str("core.hooksPath", ".git/hooks");

    ui.success(format!(
        "Initialized empty SecureGit repository in {}",
        if bare {
            path.display().to_string()
        } else {
            path.join(".git").display().to_string()
        }
    ));

    // Install securegit hooks
    if !bare {
        let hooks_dir = path.join(".git/hooks");
        std::fs::create_dir_all(&hooks_dir)?;

        let pre_commit = hooks_dir.join("pre-commit");
        std::fs::write(
            &pre_commit,
            "#!/bin/sh\n# SecureGit pre-commit hook\nif command -v securegit > /dev/null 2>&1; then\n    securegit pre-commit --fail-on high\n    exit $?\nfi\n",
        )?;

        let pre_push = hooks_dir.join("pre-push");
        std::fs::write(
            &pre_push,
            "#!/bin/sh\n# SecureGit pre-push hook\nif command -v securegit > /dev/null 2>&1; then\n    securegit pre-push --fail-on high\n    exit $?\nfi\n",
        )?;

        #[cfg(unix)]
        {
            use std::os::unix::fs::PermissionsExt;
            std::fs::set_permissions(&pre_commit, std::fs::Permissions::from_mode(0o755))?;
            std::fs::set_permissions(&pre_push, std::fs::Permissions::from_mode(0o755))?;
        }

        ui.info("SecureGit hooks installed");
    }

    Ok(())
}