An open source privileged access management tool.
The documentation is at tidegate-dev.github.io/tidegate.
The control plane runs on Linux servers. The tools that people run on their own machines are built for Linux, macOS and Windows.
| Component | Shipped as | Platforms | Status |
|---|---|---|---|
| Control plane | Binary and container image | Linux on amd64 and arm64 | Binary in development, image planned |
tidegate CLI |
Binary | Linux, macOS and Windows, each on amd64 and arm64 | In development |
Development is supported on Linux and macOS. The Nix shell doesn't work on Intel Macs, because Nixpkgs no longer supports them.
If you use Nix and direnv, run direnv allow in the repository. It gives you a shell with every tool you need, in the versions the project uses. Without direnv, run nix develop.
The Nix shell also installs a pre-commit hook that runs just lint and just test, so a commit with a lint error or a failing test is refused.
If you don't use Nix, install these tools yourself:
- buf 1.73 or newer
- Go 1.27.3 or newer
- golangci-lint 2.14 or newer
- govulncheck 1.9 or newer
- just
- protoc-gen-go 1.36 or newer
- protoc-gen-connect-go 1.21 or a newer 1.x release
- Zensical 0.0.62 or newer, for the documentation site
Then run just to see the recipes, for example just build and just ci.
Contributions are welcome. Before you open a pull request, read CONTRIBUTING.md. It explains how to propose a change, how to title your pull request, how to sign off your commits and how you may use AI tools.