v1.0.0 GA • 36 Test Suites Passing • 9 Distribution Channels

One command. All identities.
Every single machine.

Stop pushing freelance commits with your corporate email. GitSetu automatically switches Git configs, isolated SSH keys, and credentials by directory with zero background daemons.

100% Non-Destructive: Preserves existing manual configs & SSH keys. Auto-discovers identities.

Read Docs GitHub v1.0.0 Architecture & Security

curl -sL https://gitsetu.bhaskarjha.dev/install | bash

36 Test Suites

Zero Daemons

Bash 3.2+ Core

gitsetu — bash

Click terminal or press Tab to take control

Visualizing Zero-Trust

How GitSetu cryptographically separates your identities without relying on fragile global state.

GitSetu Core Zero-Daemon Engine

ACTIVE IDENTITY

~/work/acme

Author [email protected]

SSH Key Hardware FIDO2 (YubiKey)

Isolation Strict /dev/null Shield

SHIELDED (INACTIVE)

~/projects/oss

Author [email protected]

SSH Key id_ed25519 (Personal)

Isolation Zero Crossover

Engineered for the local machine.

Built entirely on native Git directives and Bash 3.2. No background processes, no node_modules, no latency.

Zero-Trust Sandboxing

GitSetu leverages native Git includeIf directives and OpenSSH Include isolation. Corporate keys and personal credentials never cross boundaries, with zero background daemons.

Zero-Prompt Discovery

Sub-second setup --auto discovers existing SSH keys and repository authors to configure workspaces with zero prompts and 100% non-destructive co-existence.

Longest-Match Routing

Deterministic routing with full case-insensitivity on Windows (msys/cygwin) and macOS (darwin).

Pre-Commit Guard

A fail-closed hook that physically blocks commits if your active Git author email does not match the scoped workspace directory profile.

Credential Broker

Namespaced PATs stored in macOS Keychain, Linux secret-tool, and Windows Credential Manager.

FIDO2 & SSH Signing

Native YubiKey (ed25519-sk) support and automated SSH-based cryptographic commit signing.

36 Test Suites (100% Green)

260+ automated assertions covering POSIX locking, signal traps, WinGet manifests, standalone bundling, and multi-profile rehydration, backed by a 31-phase (100/100 checks) Windows Sandbox VM harness.

Encrypted Profile Vaults

Export your entire identity architecture. GitSetu uses AES-256 OpenSSL encryption to securely backup, migrate, and restore profiles across workstations.

The end of alias scripts.

Stop managing horrific SSH aliases and manual `git config` overrides. GitSetu handles it natively at the OS level.

The Old Way ~/.ssh/config

# Fragile host aliases break standard clone URLs
Host github-work.com
  HostName github.com
  User git
  IdentityFile ~/.ssh/id_rsa_work
  IdentitiesOnly yes

# Must remember mangled clone URL:
git clone [email protected]:acme/core.git

Mangles clone URLs, breaks for teammates.

The GitSetu Way ~/.gitconfig & ~/.ssh/config

# Native longest-match directory include
[includeIf "gitdir:~/work/"]
  path = ~/.config/gitsetu/profiles/work.gitconfig

# Standard clone URLs everywhere:
git clone [email protected]:acme/core.git

Standard clone URLs, 100% non-destructive.

How GitSetu compares.

Verified v1.0.0 GA specification against competing ecosystem tools.

Feature	GitSetu	gitego	karn	gh CLI	GCM
Zero runtime dependencies	✅	❌	❌	❌	❌
Zero-prompt auto-discovery (--auto)	✅	❌	❌	❌	❌
Preserves existing manual configs & SSH keys	✅	❌	❌	❌	❌
Standard clone URLs (no custom Host aliases)	✅	❌	❌	❌	❌
Pre-commit identity guard	✅	⚡	❌	❌	❌
Native includeIf sandboxing	✅	✅	❌	❌	❌
Auto-provisioned workspaces (mkdir -p)	✅	❌	❌	❌	❌
Longest-prefix match routing	✅	❌	❌	❌	❌
Automated SSH key generation	✅	❌	❌	❌	❌
Zero-Trust SSH Isolation (ADR 0002)	✅	❌	❌	❌	❌
Per-profile Credential Broker	✅	❌	❌	⚡	✅
GPG & SSH commit signing	✅	❌	⚡	❌	❌
FIDO2 / YubiKey Support	✅	❌	❌	❌	❌
9 Distribution Channels (npx, brew, winget, etc.)	✅	❌	❌	⚡	⚡
Standalone monolith bundle (no git clone)	✅	❌	❌	❌	❌
36 Automated Test Suites (Clean-Room + Sandbox VM)	✅	❌	❌	❌	❌
Zero background daemons (0 KB RAM)	✅	⚡	⚡	⚡	❌
Runtime	Bash 3.2	Go	Go	Go	.NET

✅ Full support ⚡ Partial (e.g. GPG but no SSH) ❌ None

In Sanskrit, Setu (सेतु) means bridge —
connecting two shores without disturbing either.

Good security should not require developer discipline.
The question of "Who committed this?" is no longer personal;
it is architectural.

A tool that demands your attention has failed.
GitSetu succeeds when you forget it exists.

Vision 2026

The Universal Identity Fabric.

With v1.0.0 GA established as the enterprise baseline across 36 regression test suites, GitSetu expands from local workstation security to universal developer, CI/CD, and agentic identity orchestration.

Universal Distribution

Single-file standalone bundle (no git clone), WinGet, Homebrew, Scoop, AUR, Nix Flakes, npx zero-install, GitHub CLI extension (gh gitsetu), and sub-second auto-discovery (gitsetu setup --auto).

Shipped in v1.0.0

Parity & Ecosystem UX

Interactive Web Config Visualizer on gitsetu.bhaskarjha.dev, fuzzy profile switching (fzf), native VS Code status-bar guard, and structured JSON API.

Phase 2

The Enterprise Moat

Scheduled 90-day automated key rotations, headless ephemeral CI/CD identity runners, pre-push secret scanning, and append-only compliance logs.

Phase 3

Deploy with Confidence.

The enterprise identity fabric that physically prevents leakage.

Get Started Now View on GitHub

One command. All identities. Every single machine.