GitKraft is a platform for distributing software as source code, combined with a patch management system designed to help end-users easily manage and preserve their custom, source-level modifications.

The patch management system enables users to re-apply their changes following software updates. GitKraft stores patches as Git commits and uses GitHub as its user interface. Currently, GitKraft offers more than 100 open-source Helm charts, all of which can be easily customized and maintained through patches.

Traditional configuration files can cause unexpected issues when default values change during software updates – user-defined settings may become incompatible without warning. To address this, GitKraft replaces standard configuration files with patches. These patches explicitly capture both the original default values and the user's customizations, enabling the update system to notify users whenever underlying defaults change.

Furthermore, large organizations often need to adapt the source code of vendor or community software to meet specific requirements while keeping up with the latest updates. However, GitHub has a notable limitation: a fork of a public repository must also be public, as private forks of public repositories are not supported. GitKraft bridges this gap by enabling the creation of private forks for public repositories.

While GitHub allows private forks when the source repository is private (with the option to later make the source repo public), this approach introduces a significant security flaw. Users from other organizations can access commits from private repositories within the same fork network, even including commits from deleted private repositories. Truffle Security has highlighted this issue¹, which poses a severe risk of exposing confidential information. GitKraft's private forks address this problem, ensuring your data remains secure and isolated.

In addition to secure forks, GitKraft offers a modern and efficient solution for managing source-code patches, overcoming challenges associated with traditional approaches. Current patch management methods often obscure the change history, complicating code reviews and collaboration. Some common problems include:

• .patch files in Git repositories: Storing customizations as .patch files feels like using one version control system inside another, making it difficult to understand changes.
• Merge: Merging upstream changes into a private branch buries customizations within the branch's history, making it hard to distinguish between official releases and custom modifications.
• Rebase: Rebasing a patch branch over upstream changes disrupts workflows for developers who have already checked out the branch, leading to errors when running git pull.

To address these challenges, GitKraft introduces a novel approach to patch management with a new operation called weld merge. This operation preserves a transparent history of changes, simplifying audits and fostering effective collaboration.

In summary, GitKraft accelerates development and update cycles, enables rapid vulnerability fixes, and maintains clear audit trails. These features empower open-source collaboration, reduce reliance on permanent forks, and streamline contributions back to the community.

A prime example of software distributed as source code is Helm charts, commonly used to configure services on the Kubernetes platform. End-users often need to customize Helm templates at the source level, highlighting the need for robust patch management solutions like GitKraft. To benefit the public, GitKraft distributes popular open-source Helm charts on its platform.

⭐ Star this project. Highly recommended, starred users may receive support priority over regular users.

📲 Follow me on LinkedIn. Don't miss out on updates.

▶️ Watch a demo. See it in action.

✉️ Send me a free message on LinkedIn. If you're interested in this project, tell me what you need! I promise – no chatbot!

GitKraft was created by Aleksander Korzyński and is maintained by KZS Commerce Ltd, a company registered in England and Wales under company number 12242538, with its registered office at: Office 315B, 182-184 High St. North, London, E6 2JA, United Kingdom.