TortoiseGit Synchronize Push Visibility Confirmation
0 reputation · 05 Jun 2020, 17:16 UTC
TortoiseGit Synchronize Push Visibility Confirmation
The Synchronize dialog in TortoiseGit allows users to push local commits to a configured remote repository. However, the feature does not distinguish between public and private remotes during the push operation.
When a remote is added through the 'Add Remote' dialog, users can inadvertently configure a public GitHub or GitLab repository as the target. Subsequent use of the Synchronize command with Push selected will execute the push without any warning about the remote's public visibility.
The GUI relies entirely on the local .git/config for remote settings and has no capability to query hosting services for visibility information. This creates a permission boundary issue where sensitive data could be exposed to public repositories without explicit user confirmation.
Currently, there is no built-in mechanism to enforce push-only-to-private repositories or to require explicit confirmation when pushing to potentially public remotes. Users must manually verify remote URLs before synchronizing.
Is there a configuration option or setting within TortoiseGit that can enforce visibility checks before push operations, or is this behavior expected to require manual verification of remote URLs?