Citi Hackathon GitProxy Use Case: Deploy push protections and policies on top of Git

[lucaborella89]

Deploy push protections and policies on top of Git

GitProxy enables companies such as Citi, Royal Bank of Canada (RBC) and NatWest to scan code for security and compliance issues before it is pushed to a codebase. Today, GitProxy is limited in the checks and types of scans it runs before allowing code to be pushed upstream or allowed outside of a private network. We want hackers to create discrete functions that takes a git diff as input and outputs detected security holes and compliance issues in the code. Ask yourself, what are the types of checks & scans that organisations like Citi should run on code before publishing it on the Internet.

Expected Features

This may includes:

1. Detection of data (incl. test data, JSONs, .log, .csv, .xlsx)
2. Usage of non-standard cryptography and encryption techniques
3. Patentable assets detection (incl. images, videos, graphics, designs)
4. Detection of AI/ML usage (incl. OSS libraries, weights etc.)

Useful apps, systems, projects, technologies, libraries, datasets:

GitProxy is an open source library hosted on the public internet on GitHub
https://github.com/finos/git-proxy

[JamieSlome]

For more detail on the use case, please refer to:

Hack-a-thon: Go Plugin Crazy 🎉