Skip to content
TopicTracker
From HackerNewsView original
TranslationTranslation

Fremforge: Forgejo-based, EU-hosted Git/CI with its own Sigstore instance

Fremforge is a new Git repository and CI/CD service built on Forgejo, hosted in the EU, and featuring its own independent Sigstore instance for software artifact signing and verification.

Background

- Forgejo is a free, self-hostable Git platform forked from Gitea (which was forked from Gitea when it was bought by a company). It's similar to GitHub or GitLab but fully open-source and community-governed, popular among developers who want control over their code hosting. - Sigstore is an open-source signing service backed by the Linux Foundation, mainly used to cryptographically sign and verify software artifacts (like container images or binaries) so users can trust their origin. It was originally dominated by Google, Red Hat, and Purdue — "its own Sigstore instance" means running it independently, not relying on the public shared one. - "EU-hosted" (likely in Germany, based on the domain's registry info) signals compliance with GDPR and a deliberate choice to keep code and CI data under European jurisdiction, appealing to EU companies, public sector orgs, and privacy-conscious developers. - The site frem.sh appears to be a small, independent hosting service; this announcement positions Fremforge as a niche alternative to GitHub Actions, GitLab CI, or self-hosted runners, with built-in software supply-chain security (Sigstore signing) out of the box.

Related stories