The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Back to feedPost
I built an MCP server so Claude can work with GitHub safely. GitMCP gives AI assistants 18 tools for repos, issues, PRs and commits. Writes are off by default, tokens are never logged, and every input is validated. 112 tests, mypy strict. Biggest lesson: make every error short and actionable, because the AI reads it and decides what to do next. Repo: github.com/wablevaibhav/gitmcp
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Related posts
The fix for an agent that keeps getting your design system wrong isn't a better prompt.
It's putting the rules where the agent reads them.
In the repo. In skills. In checks it can run itself.
Writing a course about exactly this.
What sells it for me is the refusal telling the agent exactly where the token should go. A bare "no hex" error usually just sends it looping. Does guard.mjs run only as an agent hook, or in pre-commit too so it catches humans as well?
The danger of SaaS Git dependency: When a vendor outage, account suspension, or price hike halts your entire engineering lifecycle.
Most modern technology companies anchor their entire software supply chain—source code, CI/CD pipelines, secret management, package registries, and issue tracking—to a single external SaaS provider (GitHub or GitLab).
While convenient, this model creates massive single-point-of-failure vulnerabilities and compliance liabilities:
1. Cascading Outage Disruption: When the SaaS provider suffers an incident, your developers cannot push code, CI pipelines cannot run security scans, and production emergency hotfixes are completely paralyzed.
2. IP Sovereignty & Data Exfiltration: Hosting sensitive proprietary algorithms, enterprise encryption keys, or regulated financial/healthcare intellectual property on multi-tenant commercial clouds carries inherent data exposure and regulatory audit friction.
3. Unpredictable Tier Pricing: Public SaaS platforms continually monetize developer seats, build minutes, and artifact storage, driving unexpected 40%+ operational cost increases.
The modern solution for resilient engineering organizations is deploying a self-hosted, sovereign Git forge (such as Forgejo or Gitea) integrated with dedicated, air-gapped CI/CD runners:
• Mathematical Resource Efficiency: Forgejo is a lightweight Go binary with a PostgreSQL backend. It delivers full Git hosting, PR reviews, issue management, and container registries consuming under 250MB of RAM—compared to 16GB+ for heavy alternatives.
• Native Actions Compatibility: Run standard, modern CI/CD workflows utilizing your existing YAML configurations with dedicated, bare-metal ephemeral execution runners.
• True Data Sovereignty: Store all git repositories, artifacts, and build logs on your own encrypted storage volumes (NVMe/Ceph) behind your zero-trust network perimeter.
• Hybrid Synchronization: Mirror external open-source dependencies locally for air-gapped security, while maintaining automated bidirectional replication to public repos when desired.
Take back control of your source code, your intellectual property, and your developer workflow.
Deploy a production-hardened sovereign Git forge with our 1–2 week Sprint on Contra:
#DevOps #Infrastructure #Security #CyberSecurity #Automation #Linux #SRE #Architecture
Hi Contra! I'm Waqas, a web app developer with 13 years of power plant maintenance behind me.
I built SkillsTribes Maintain, a maintenance management system for HVAC contractors: PM scheduling, complaints with live SLA timers, an equipment register with QR tags, monthly client reports and a client portal.
Built with React and Supabase. Try the live demo: demo.skillstribes.com
I'm open to building web apps, dashboards and internal tools for small businesses. Feel free to message me.
