What Software Powers the CGSecurity Git Repositories Web Interface?

Updated

The CGSecurity git repositories site runs on cgit, a fast web interface for Git. The footer of the index page states this directly: "generated by cgit (git 2.34.1) at 2026-10-05 22:41:05 +0000." That single line identifies both the browsing software (cgit) and the underlying Git version (2.34.1) that serves the repositories. You can verify it yourself by scrolling to the bottom of the index page at git.cgsecurity.org.

What cgit is

cgit is a web front end that renders Git repositories in a browser. Instead of cloning a repository to read its history, you open a URL and get a page listing commits, files, and metadata. The CGSecurity index describes it as "a fast webinterface for the git dscm" — a lightweight layer over Git rather than a full hosting platform.

That design has practical consequences:

  • No account is required to browse. The index and repository pages are read-only views; nothing in the page evidence shows a login or sign-up flow.
  • No installation is needed on your side. You use the web interface directly in a browser.
  • It is a viewer, not a forge. There is no evidence of issue trackers, pull requests, or user profiles on the index — just repository listings.

How to confirm the software yourself

  1. Open git.cgsecurity.org in a browser.
  2. Scroll to the footer of the index page.
  3. Look for the line beginning "generated by cgit."
  4. The parenthetical shows the Git version the server uses — here, git 2.34.1.

The timestamp next to it is the moment the page was generated, not a repository update time. It changes on each render.

What the index page shows

The index is a table of repositories with these columns:

Column What it contains
Name Repository name, e.g. cmospwd, testdisk
Description Short text, e.g. "TestDisk & PhotoRec"
Owner The maintainer, e.g. Christophe GRENIER
Idle Time since the last activity, e.g. "3 years" or "38 hours"
Links Entry points into the repository: summary, log, tree

The Links column is where browsing actually starts. summary gives an overview, log shows the commit history, and tree lets you walk the file structure — the standard cgit navigation set.

Why this matters if you are looking for source code

If your goal is to read or download TestDisk and PhotoRec source, the cgit interface is the entry point. The testdisk repository holds both projects, and its Idle value (38 hours at the time of the snapshot) indicates recent activity, while cmospwd shows 3 years idle. Because cgit exposes a tree view, you can browse files without cloning; if you need the full history locally, use the clone URL that cgit typically exposes on the summary page.

The key takeaway: the site is a cgit instance, it is browsable without an account, and the footer is the authoritative place to check which cgit and Git versions are running.