Gitblit

What it does

Access controls

Access permissions are assigned per repository and include view, clone, push, ref creation, ref deletion, and rewind permissions.checked 10 Oct 2026

Administration API

Administrators can manage repositories, user accounts, and teams through the web UI, JSON RPC, or SSH command line with the Powertools plugin.checked 10 Oct 2026

Backup and federation

Federation can back up repositories and optionally user accounts, team definitions, server settings, and Groovy push-hook scripts to another Gitblit instance or a Federation Client.checked 10 Oct 2026

Code collaboration

It includes optional issue tracking and a pull-request-like workflow based on branches in the primary repository.checked 10 Oct 2026

Deployment options

Gitblit GO is an integrated Jetty-based stack, while Gitblit WAR is intended for deployment in a servlet container.checked 10 Oct 2026

Git transports

SSH, HTTP, and the Git protocol are supported out of the box.checked 10 Oct 2026

Integration

Authentication options include LDAP, Redmine, Salesforce, Windows, PAM, and custom user services.checked 10 Oct 2026

Notable limitation

Built-in access controls apply to entire repositories and are not branch-based.checked 10 Oct 2026

Plugins and hooks

Gitblit supports plugins and Groovy push-hook scripts that can run before or after pushes.checked 10 Oct 2026

Purpose

Gitblit is an open-source, pure Java stack for managing, viewing, and serving Git repositories, designed primarily for small workgroups hosting centralized repositories.checked 10 Oct 2026

Repository features

Features include personal repositories, repository forks, create-on-push, and automatic updates for repository mirrors.checked 10 Oct 2026

Runtime requirement

Gitblit requires a Java 8 Runtime Environment or Development Kit.checked 10 Oct 2026

Security features

Gitblit GO can generate an SSL certificate for HTTPS and includes a GUI tool for X.509 PKI tasks, including certificate generation, revocation, and distribution.checked 10 Oct 2026

Security update

The 1.10.0 release fixes a vulnerability that could bypass authentication on SSH transport, and the release notes urge users to update.checked 10 Oct 2026