-2

I have two identical repositories on two separated internet-less machines.
The code is sensitive and cannot be exposed to the outside world (even not its diff).

How secure is a git bundle file which contains only a delta update?
I know that one cannot pull from it if he does not have the initial base - git bundle verify will fail.
Opening the file with text editor does not reveal any segment of code.
Is there a way for a third party to open and see the code within?
How secure is it?

nafarkash
  • 359
  • 6
  • 24

1 Answers1

4

It's not secure at all — it contains the same code (or the same diff) that will be applied to repositories. If you cannot expose the repositories (even diff) you cannot expose bundles.

If you want to pass bundles in a secure manner encrypt them.

phd
  • 82,685
  • 13
  • 120
  • 165