Keep control of your code
Your repositories stay inside the platform cluster. They are cloned through an internal service, with no external network egress and no pasted token, which makes them suitable for segregated or offline deployments
No external network egress
Unified sign-in
Your teams sign in with your organization identity (OIDC). Local accounts are disabled, so there is no forge-specific password to manage
SSO via OIDC
Managed continuous integration
Fully managed repositories and CI runners, hosted inside your cluster: run pipelines from your repositories without installing or operating any build infrastructure
Managed CI runners
Integrated with dev workstations
Clone and push to your internal repositories from your development environments, using a short-lived credential derived from your identity, with no personal token to copy and paste
Repository and branch pickers