Integration SSH keys for git repository access, but not any kind of management or UI

[mk-fg]

Hi,

I've been looking for a simple git repo-management system like this to run in a VM to:

• Be able to quickly create a new git project repo, with reasonably-secure access via SSH keys only.
• To configure third-party external tools to push their configuration to such ad-hoc repositories (e.g. ServiceNow project exports/imports).
• Have some simple UI to quickly browse repos, check what these third-party tools pushed into those, without needing to clone/pull all that into a local copies each time.

Full-fledged WebUI forges are a bit overkill for this, while soft-serve seems ideal, except that I can't seem to find one required feature, so thought to ask, in case I missed it:
Is it possible to add an SSH key to have push/pull access to a repository, without granting that key any other kind of access (no UI, no repo creation/deletion, etc)?

I.e. with a third-party tool/service, which I have no control over, access must not include anything except simple push/pull to that repository via ssh+git (kinda like what common/old gitolite tool allows to do).

I think the answer currently is "no", as there is no separate "git access type" vs "management access type" dimension in the documented permission model, which would allow for such "tool/automation access user/credential" to exist.

If I didn't simply miss it somewhere, and that is indeed the case, it might be a nice feature from my "can't configure pushing this to github, but setting up full codeberg for just 3 repos seems silly" perspective.
Guess next best thing is separate gitolite (git access) + cgit (simple UI) setup, but would've been nice if soft-serve covered that too.

Thanks for you work, it is a very nice tool to run for purely-human collaboration regardless.
Cheers!