Deflekt reads your Gitea repositories, pull requests and issues, opens pull requests with tested fixes across several repositories, and answers review comments and failing Gitea Actions runs, all inside your network.
Teams that run Gitea usually chose it on purpose. The code stays on their own servers, often behind a VPN, and no outside service gets a copy. That is exactly the setup Deflekt was built for: the work that touches your code happens inside your network, and only the results come out.
Case #5172 started with Pieter from Van Damme Bouw charged twice. Deflekt traced it to a webhook handler that lost its idempotency key, and opened PR #2231 on the team’s Gitea with a 9 line fix and a test.
review on PR #2231 from lina: "log the idempotency key when we retry"
commit add idempotency key to retry log line
run gitea actions: test 1,284 passed · lint failed
commit wrap long line in payment_webhook.rb
run gitea actions: all checks passed
reply "Done in 3f9c2e1, key is now in the retry log."
Deflekt’s workers run in the same network as your Gitea instance. They clone over your internal address, run the tests and record the QA there. Your Gitea does not need to be reachable from the internet, and source code never leaves your network. Only the results, the recording and the pull request links reach the hub, and credentials are encrypted at rest and scoped per project. Forgejo, the community fork of Gitea, works the same way.
Deflekt never merges. Every change is a pull request your team reviews. See the same flow on GitHub and GitLab, or read how it catches regressions after a deploy.