NDSS 2025 – Rethinking Trust In Forge-Based Git Security

This NDSS 2025 session highlights “Rethinking Trust In Forge-Based Git Security,” presenting gittuf, a decentralized framework that distributes policy declaration, repository activity tracking, and enforcement across developers instead of a central forge. The approach aims to prevent unauthorized changes and mitigate risks from forge or maintainer compromise, with analysis showing protections against known VCS attacks and evaluations indicating low overhead (under 4% storage and ~0.59s per push verification).