REGEXVAULTv2.0
Dev & Systems/Git
Verified Safe

Git Remote URL (SSH) Regex for JavaScript

/^git@([a-zA-Z0-9][a-zA-Z0-9\-.]{0,61}[a-zA-Z0-9]):([a-zA-Z0-9_.\-][a-zA-Z0-9_.\-/]{0,253}(?:\.git)?)$/

What this pattern does

This page provides a comprehensive, battle-tested regular expression for matching git remote url (ssh), ported and verified for JavaScript. A rigorously tested regex reduces debugging time and protects your application from edge-case failures. The snippet below is ready to drop into your JavaScript project — whether you're validating in an Express middleware, a Next.js API route, or a client-side form.

Javascript Implementation

Javascript
// Git Remote URL (SSH)
// ReDoS-safe | RegexVault — Dev & Systems > Git

const gitRemoteUrlSshRegex = /^git@([a-zA-Z0-9][a-zA-Z0-9\-.]{0,61}[a-zA-Z0-9]):([a-zA-Z0-9_.\-][a-zA-Z0-9_.\-\/]{0,253}(?:\.git)?)$/;

function validateGitRemoteUrlSsh(input: string): boolean {
  return gitRemoteUrlSshRegex.test(input);
}

// Example
console.log(validateGitRemoteUrlSsh("git@github.com:user/repo.git")); // true

Test Cases

Matches (Valid)
Rejects (Invalid)
git@github.com:user/repo.githttps://github.com/user/repo.git
git@gitlab.com:group/subgroup/project.gitssh://git@github.com/user/repo.git
git@bitbucket.org:user/repo.gitgit@github.com/user/repo.git
git@git.example.com:team/projectgit@:user/repo.git
git@github.com:org/repouser@github.com:user/repo.git

When to use this pattern

This pattern is drawn from the Dev & Systems > Git category and carries a ReDoS-safe certification. That matters for JavaScript developers because especially critical in long-running Node.js event loops where a ReDoS vulnerability can block the entire process. RegexVault audits patterns against known backtracking attack vectors, ensuring you have the necessary context before using this regex in a high-stakes production environment.

Common Pitfalls

The colon is SCP-style. git@github.com:22:user/repo.git is invalid. Use the ssh:// scheme form to specify a custom port.

Technical Notes

SSH Git URLs use SCP-like syntax (host:path). Group 1 = hostname, group 2 = repository path. The colon is not a port separator here.

Have a pattern that belongs in the vault?

Submit it for review — community-verified patterns get credited to your GitHub handle. Free submissions join the queue. Priority review available for $15.

Submit a Pattern