Platform

A complete git platform, built to be the system of record

Repositories, review, merge policy, Actions, issues, webhooks, and organization security — one permission model and one audit trail across all of it. Nothing here is a plug-in.

Try the preview See pricing

01Repositories

Every repository is an ordinary Git repository

$ gbb repo view acme/checkout-api

Public or private, owned by a person or an organization. Browse, compare, and download — with Markdown rendering and syntax highlighting where you expect them.

acme / checkout-api / src / webhooks /retry.tsmain

46 lines · 1.3 KB · TypeScriptRawBlameHistory

36/** Sends a webhook once per delivery id, even across retries. */

37export async function deliver(event: WebhookEvent, store: DeliveryStore) {

38 const key = event.deliveryId;

39 if (await store.seen(key)) {

40 return { status: "duplicate" };

41 }

42 await send(event, { idempotencyKey: key });

43 log.debug(`delivered ${key}`);

44}

46export { retryPolicy } from "./policy";

ari Make webhook retries idempotent (#112) · 8ad1e77 · 3 hours ago

Branches, commits, tags, compare, and history

Code browsing with blame and syntax highlighting

Source archives and release downloads

02Pull requests

Review that keeps its own record

$ gbb pr view 112 --repo acme/checkout-api

Review requests, drafts, approvals, and required checks. The timeline is the source of truth for how a change landed.

Make webhook retries idempotent #112

Mergedari merged 3 commits into main from webhooks/idempotent-retries

ari opened this pull request 6 hours ago

Skips deliveries the store has already sent and passes an idempotency key, with a test for the timeout retry. Checks are attached below.

ari added 3 commits · c1a9f02 4be77d1 3f1a2c9

✓ sam approved these changes · 5 hours ago

✓ All 3 required checks passed · build, test, lint

● Merged by ari · squash · 3 hours ago

Pull request successfully merged and closedDelete branch

Draft state, review requests, and re-review

Update-branch and merge policy enforcement

Comments, reactions, and reference timelines

03Merge safety

Rulesets decide how main changes

$ gbb pr merge --squash 112

Protection rules target the default branch, protected branches, or every branch of a repository — and auto-merge lands a change only once every required check has passed.

Ruleset · Protect mainActiveTarget: protected branches · enforcement active

Require pull request approvals

Required approvals: 1 · owner approval required

Restrict file paths

secrets/** · *.pem

Maximum file size

5 MB per file

Required deployments

staging must succeed before merging

Commit metadata rules

author_email ends_with @acme.com

Bypass list

team platform-maintainers · until 2027-03-31

Bypass: team platform-maintainers · last changed by ari · 2 minutes ago

Required reviews, checks, and SSH-signed commits

Force-push and deletion protection

Auto-merge when required checks pass

04Actions · planned for launch

Workflows that gate the merge

$ gbb actions run list --repo acme/checkout-api

Workflows in .github/workflows run on hosted Linux runners when you push, open a pull request, or dispatch by hand. Each run reports to the pull request as a check — next to check runs posted through the API from any other CI.

Jobs, needs, matrices, expressions, and run steps

Secrets, environments with approvals, and OIDC for AWS

Logs, artifacts, caches, re-runs, and cancellation

05Issues

Discussion that stays attached to the work

$ gbb issue list --repo acme/checkout-api

Issues, labels, milestones, and organization-wide issue types — with reactions, references, and notifications that follow you.

Duplicate webhook deliveries on retry #131

Opensam opened 2 days ago · 3 comments

sam 2 days ago

Two handlers resend when the first attempt times out, so receivers see the same event twice. Repro with the staging replay of delivery dlv_01J7Q…3f.

👍 2👀 1

lena yesterday

Same pattern in the refund handler. Tracking the key header in #127.

lena referenced this issue in #127 Expose idempotency keys in the API · yesterday

Assignees

lena

Labels

bugwebhooks

Type

Defect

Milestone

v2.4 · 62%

Notifications

Subscribed · 4 participants

Full lifecycle: open, assign, label, close with a reason, reopen

Reference timelines across issues and pull requests

Notification preferences and subscriptions

06Webhooks & API

Integrate without a middleman

$ gbb api /api/v1/repos/acme/checkout-api/webhooks

Signed webhook deliveries with retries and redelivery, an authenticated REST API for repositories, issues, pull requests, Actions, and checks, and a native CLI that speaks the same contracts.

Subscriptions, signed delivery, retries, and retention

Bounded, authenticated API requests from gbb api

Scoped personal access tokens and SSH keys

07Organizations & security

Policy at the organization, enforced everywhere

$ gbb api /api/v1/orgs/acme

Owner, admin, member, and billing-manager roles; teams; capability-based permissions on every repository and release action.

Organization policy: two-factor required before members create repositories

Session and device management with revocation

Audit events for organization, repository, and security actions

One platform, one record

Create an organization, push your first repository, and let its workflows run.

Try the preview See pricing