Zero trust-based federated autonomous technology for code repository

Abstract

The code repository stores all the code, configuration files, and historical versions of the enterprise, which is an essential tool in the software development process. However, it also brings unprecedented security threats to enterprises, and the traditional network security architecture has been unable to satisfy the high-security and high-reliability management requirements of the code assets of research institutions. To this end, based on the Zero Trust (ZT) security paradigm, we propose a code repository federated autonomous technology, build a decentralized and distributed autonomous security protection mechanism, realize bidirectional identity authentication and dynamic trust evaluation mechanism for the authorization management of code resources, improve the security and protection level of the code repository, and effectively solve the security protection shortcomings of the existing collaborative research and development environment.