Any git host

git Clone from any git server with a username and token over HTTPS, or an SSH key. Repositories are entered by address.

Setup

  1. Choose how Pando signs in

    Settings method, host

  2. Create an access token

    1. On the git host, create an access token with read access to the repositories.

    Settings username, token · Only when method is token

  3. Add an SSH key

    1. Run ssh-keygen -t ed25519 -f pando-deploy -N "".
    2. On the git host, add pando-deploy.pub to the repository as a read-only deploy key.
    3. Paste pando-deploy below.
    4. Run ssh-keyscan with the host's name, on a machine you trust, and paste its output below.

    Settings ssh_private_key, ssh_passphrase, known_hosts · Only when method is ssh

  4. Choose a path prefix

    Settings scope

Settings (9)
methodHow Pando signs inRequired
  • token Username and token — HTTPS, with an access token or password as the password.
  • ssh SSH key — A deploy key. The host's public key is pinned.

one of the values above · Default token

hostHostRequired

The host repositories are on. Change it for a self-managed server.

string · For example git.example.com

scopePath prefix

Empty is every repository on the host.

string · For example acme

usernameUsername

The account the token belongs to. Empty is git.

string · For example git · Used when method is token

tokenToken or passwordCredential

Read access to the repositories is enough.

string · Used when method is token

ssh_private_keySSH private keyCredential

The private half of a deploy key or access key added to the repository. Pando reads the repository with it and never writes.

string · Used when method is ssh

ssh_passphraseKey passphraseCredential

Only if the key has one.

string · Used when method is ssh

known_hostsKnown hosts

The host's public key, as ssh-keyscan <host> prints it.

string · Used when method is ssh

ca_bundleCertificate authorityAdvanced

PEM certificates to trust for a self-managed host on a private certificate authority, beside the system's.

string · Default The system's trusted certificates