finos / finos/git-proxy

Extend GitProxy to Handle All GitHub Communications and Reviews

Open
#910 8 comments 1 reaction 1 assignee Claimed by @coopernetes View on GitHub
enhancement
Dominant language
TypeScript
Stars
249
Forks
176
Avg merge
3d 8h
Merged PRs (30d)
20

Description

**Is your feature request related to a problem? Please describe.**
Financial institutions and enterprises with strict security requirements need complete control and visibility over all GitHub interactions, including both git protocol operations and web-based communications. While git-proxy handles some git protocol operations, a comprehensive solution is needed that covers all possible interaction channels with GitHub. This includes git protocol operations (push/pull/fetch), API communications, issue management, pull request reviews, and general GitHub interactions. Currently, the fragmented coverage of these channels creates potential security gaps, makes it difficult to maintain a complete audit trail, and risks sensitive information being accidentally exposed.

**Describe the solution you'd like**
Implement a comprehensive GitHub proxy layer that intercepts and manages all forms of GitHub interaction from within an organization:

1. Git Protocol and Web/API Communication Coverage:
- SSH protocol communications
- HTTPS protocol communications
- REST API calls to GitHub
- GraphQL API communications

2. Feature Coverage:
- Issues Management:
- Creation and modification of issues
- Comment management
- Pull Request Operations:
- PR creation and updates
- Review comments and discussions
- Review state management (approve/reject/request changes)

3. Security Features:
- Content scanning pipeline for all communications (both git and web)
- Pattern matching for sensitive data (API keys, internal IPs, etc.)
- Custom regex rules for organization-specific sensitive data
- Automatic redaction of identified sensitive information
- Block/Allow lists for specific types of content
- Pre-push hooks for git operations
- Commit content scanning

5. Audit Capabilities:
- Detailed logging of all GitHub interactions (git and web)
- Who-did-what-when tracking across all channels
- Full text search across historical communications
- Git operation audit trail
- Export capabilities for compliance reporting
- Commit history analysis

6. Review Workflow:
- Multi-level approval process for different types of operations
- Automated review rules based on content patterns
- Emergency override capabilities with proper authentication
- Pre-push review requirements

7. Administration:
- Role-based access control for all proxy features
- Configuration management through code
- Health monitoring and alerts
- Performance metrics and analytics

**Additional context**
This feature would be particularly valuable for:
- Financial institutions requiring strict compliance with regulations
- Organizations handling sensitive intellectual property
- Enterprises with strict data loss prevention requirements

The implementation should provide a unified interface for managing all GitHub interactions while being minimally intrusive to developer workflows.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.