ssh - Are there any useful security logs and protection methods for self-built git servers?

Question

You need to set up a Git server. Currently, both git and gitolite can run correctly. But there is a worry, I am afraid that the team members will write it randomly, especially because the User Info of git can be filled in randomly.

Want to know if there is any way to record everyone’s operations?

My Git server is forced to use private key authentication. I wonder if there is a way to bind each push action to the private key, so that I can see who each submitter is.

PS: There is no need to recommend Gitlab and the like. The team is shabby and the servers that can be used for git are not as powerful as the CPU of a mobile phone. Tried it, can't carry it.

Answer 1

Use pre-receive hook to verify push.
gitolite comes with an example that can get the basic information of the push object.