supply-chain-git-platforms

To audit Git platform security and access controls, you can perform a read-only security audit using API tokens to evaluate organization settings, repository permissions, and branch protection policies across GitHub, GitLab, Gitea, and Bitbucket.

Yes, this Git security audit supports GitHub, GitLab, Gitea, and Bitbucket by performing read-only API queries and passive directory checks to ensure compliance with security hygiene standards across these specific platforms.

To detect exposed .git directories on production servers, perform passive directory checks to identify publicly accessible .git directories that could leak source code and sensitive configuration files.

A Git platform security posture review audits organization-level settings like 2FA enforcement, OAuth app restrictions, and default repository permissions to identify access control gaps and weak security settings.

Yes, you can identify stale deploy keys and weak repository permissions through an access control audit that analyzes direct collaborator permissions, team access, and deploy key configurations.

Yes, you need an API token to check Git branch protection policies, as the audit performs read-only API queries against the target organization to evaluate security configurations without making changes.