Currently the management of Git repositories (and some PR operations) relies on SSHd and the code push content over SSH locally.
This is the most brittle part of the initial Tuleap setup (especially in hardened environment) and it is a pain to debug when something goes wrong.
Also the whole setup relies on a SSH key that is never rotated which is not great from a security PoV.