Any recommendations for alternatives to GitHub for corporate use?

The current GitHub AI training thing means that GitHub cannot be used for anything confidential. There's no way of saying at an org level that data cannot be used to train AI, which means that anything in a GitHub private org used by more than one person is at risk.

I've mostly looked at alternatives for personal and F/OSS things. The requirements for corporate use also include decent ACLs, MFA, and so on.

#AICostsYouPayingCustomersYouMuppets

@david_chisnall My employer has a GitLab installation (with around 500 employees).
@david_chisnall Are you mainly looking for SaaS, or thinking of maintaining your own infrastructure?
@david_chisnall
We use GitLab at work (game dev company so not keen on our stuff being trained upon).
@baltauger @david_chisnall GitLab has also been adding a lot of "AI" features in the recent years, but at least most of those are optional.

@autiomaa

It doesn't have to be gitlab.com though.
For example: https://www.stackhero.io/en-GB/services/GitLab/benefits
I'm sure there are others.

@baltauger @david_chisnall

Stackhero

@david_chisnall companies are going to need to start fucking listening to people like me who have been telling them for years that if it's that important, a contract isn't worth the paper it's printed on if it's in someone else's hands. And they're gonna have to invest money in hiring skilled, educated workers who actually know how to research, build, run, and maintain infrastructure like that.

BTW, GitLab is also on the 'hell no' list. You can't opt out of their LLM shit or hosted runners.

@david_chisnall so yeah, basically, you're screwed without hiring an actual infra architect *BEFORE* you even think about buying hardware for it, much less picking software. ESPECIALLY for a problem like this.
Because the only 'turnkey' is Perforce Helix and it NEEDS a dedicated architect up front to even think about deploying. That's before the budget-crushing pricetag.

@david_chisnall and to be clear here: I've used P4 for years. I'm still a big fan of P4. It does what others can't and it does version control better than anything else, period. I would not hesitate to recommend P4 as a replacement to anyone with unlimited budget.

The trade-off is that it is a VERY complex product that REQUIRES specialists to effectively deploy and manage. That's why they offer "we'll admin your on-prem for you" services.

@david_chisnall I can recommend (self hosted) Forgejo. It's not perfect, but then, what is, and, also, it actually keeps getting better.
@david_chisnall I think Worktree (https://about.worktree.ca/) might be worth looking into although I'm not too familiar with it personally.
Worktree

Worktree is a Canadian Git, DevOps, and Cloud platform. Collaborate on code, build with GitHub-compatible Actions, and deploy to Worktree Cloud.

Worktree
@david_chisnall
Azure DevOps!
@FritzAdalis Noooo! I’d repressed those memories!
@david_chisnall
Okay, you can pick from TFS or SourceSafe.

@david_chisnall perhaps the obvious options would probably be GitLab or Bitbucket.

There's a more exhaustive list on Wikipedia : https://en.wikipedia.org/wiki/Comparison_of_source-code-hosting_facilities

Based on the number of users alone, maybe Launchpad (Canonical), or SourceForge would support corporate orgs.

Gitea seems to offer "enterprise" services, whatever that means. Seems to be more of a supported self hosted, though they do administer their own instance.

Codeberg supports private organizations and teams management. Maybe you could talk to them. Clearly if your org is willing to pay for GHE, I'm sure that money could help them help you.

Comparison of source-code-hosting facilities - Wikipedia

@david_chisnall Fedora/RedHat switched to @forgejo and I like them too

@david_chisnall

My employer just announced that they will be closing their internally run github instance (thus self-controlled re AI, IP, and all that) and forcing the entire university to microsquishy's guthub . com.

I mean WTF?

[edited to correct typo from autocorrect on a phone]

@david_chisnall If you want something enterprisey gitlab is pretty pog
@david_chisnall We're using GitLab (hosted on our servers) at work, and it's ok? I wouldn't say that it's perfect, but works fine for ACLs, have it integrated into SSA and so on
@david_chisnall encrypted repos can be done. I've read about it a few years ago, something with a different hostname in .git/config. The remote repo is encrypted. Local ones are not. Also, git, just plain git, supports most things remotely with ssh. You have to do user management, PR's (who needs pull requests?) and ci/cd yourself. But it's fine. Really.