Security Management

Configuring a Deploy Key

For security purposes, some repositories can only be cloned and downloaded and do not support other change operations such as merge code. You can configure a deploy key for a read-only repository. To generate a deploy key locally, choose Settings > Security Management > Deploy Key on the repository details page. On the Deploy Key page, click Add Deploy Key. For details about how to generate an SSH key locally, see step 1 to step 3 in Configuring an SSH Private Key.

NOTE:

• Multiple repositories can use the same deploy key, and a maximum of 10 deploy keys can be added to a repository.
• The difference between an SSH key and repository deploy key is that the former is associated with a user and PC and the latter is associated with a code repository. The SSH key has the read and write permissions on the repository, and the deploy key has the read-only permission on the repository.
• The settings take effect only for the repository configured.

Risky Operations

CodeArts Repo allows you to change the repository owner, delete a repository, and change the repository name, but these operations are also risky. Exercise caution when performing these operations.

To configure risky operations, choose Settings > Security Management > Risky Operations on the repository details page. The following operations are supported:

• Transfer repository ownership: You can transfer the current repository to another member in the repository (but not to a viewer).
• Delete repository: Once you delete the repository, all content in the repository will be permanently deleted. This operation cannot be undone. Please exercise caution.
• Rename repository: This will invalidate the original path for access and clone. Please exercise caution.
• Transfer repository: This will change the repo access and clone addresses. The previous addresses before the transfer will become invalid. Exercise caution when performing this operation.

Adding Watermark to a Repository

CodeArts Repo allows you to add watermarks to repositories to protect intellectual property rights.

To set watermarks, choose Settings > Security Management > Watermark on the repository details page.

After the watermark is enabled, the repository displays the following watermark content: account + time.

Locking a Repository in CodeArts

You can lock a repository to prevent anyone from damaging its upcoming versions.

To lock a repository, choose Settings > Security Management > Repository Locking on the repository details page. Repo members with the settings permission can perform this operation.

If the watermark is enabled, the repository is locked and read-only. No one can commit code to any branch, create comments, or perform other related operations.

Setting an IP Address Whitelist for CodeArts Repo

In CodeArts, you can set the IP address range and access for the IP address whitelist to restrict users' access, upload, and download permissions, enhancing repository security. The IP address whitelist takes effect only for repos whose visibility is Private, Read-only for project members, and Read-only for tenant members.

To configure the IP address whitelist, you can choose Settings > Security Management > IP Address Whitelist on the repository details page. IPv4 and IPv6 are supported. The following table lists the three formats of IP address whitelists.

Click Add IP Whitelist and set parameters by referring to the following table. To modify an IP address whitelist, click the in the row where the IP address whitelist is located.

NOTE:

• To set an IP address whitelist for all repositories of your tenant, log in to the repository list page of CodeArts Repo, click the alias in the upper right corner, and choose All Account Settings > Repo > IP Address Whitelist. The configuration rules are the same as the preceding configuration.
• If you want to import the repository of another tenant but they have configured an IP address whitelist, the import will fail. In this case, contact your administrator to obtain the proxy IP address and ask the target tenant to add the proxy IP address to the IP address whitelist.

CodeArts Repo Audit Logs

CodeArts Repo allows you to modify repository attributes. It records information such as code commits and merge requests about the code repository. Each audit log contains the operator, operation type, and operation content. You can filter and view audit logs by time.

Adjusting Repository Visibility

CodeArts Repo allows you to adjust the visibility of repositories.

On the CodeArts homepage, click the profile picture and choose All Account Settings. In the navigation pane on the left, choose Repo > Repo Visibility Adjustment, and click Adjust to adjust the visibility of the code repo of a tenant.

• If the page shown in the following figure is displayed, you can create a public code repository (group) and set the visibility of the code repository to public.

• If the page shown in the following figure is displayed, the public code repository (group) cannot be created and the visibility of the code repository cannot be set to public.