Open source contribution.
With your guardrails.

An open source policy and control layer between developers and Git hosting platforms.

Open source · Apache 2.0 · A FINOS project

Built around your workflow

Keep Git. Add the controls you need.

GitProxy intercepts Git pushes and applies configurable checks and workflows before changes reach the remote repository. Combine the familiar open source contribution experience with your organisation’s security, legal and compliance requirements.

Inspect

Analyse pushes before they leave your organisation, including commits, authors, diffs and secrets. Built-in processors include hidden-commit detection and Gitleaks secret scanning.

Explore the checks

Enforce

Apply repository access rules, commit policies, pre-receive hooks and approval workflows at the point of push.

Configure your policies

Extend

Add organisation-specific controls using configurable plugins, distributed as standard npm packages or loaded as JavaScript modules.

Build a plugin

Work across Git platforms

Proxy GitHub, GitLab and other Git hosts from one instance. GitProxy v2 supports multiple hosts and Git operations over HTTP/HTTPS or SSH.

Discover multi-host support

Familiar Git. Configurable controls.

Security controls without changing how developers work.

Developers continue to branch, commit and push with Git. GitProxy sits in the path to the remote Git service, evaluates the push, and either blocks it with feedback or allows it through the configured workflow.

01 / Developer
Branch. Commit. Push.
Use the Git tools and workflow you already know.
02 / GitProxy
Your policies, at push.
Inspect changes, enforce rules and follow configured approvals.
03 / Git hosting
Your remote repository.
Changes proceed when the configured checks and workflow allow them.

What happens when a push needs approval?

GitProxy blocks the push and provides a link to request approval. Once the push is approved, the developer can retry it using the same Git command.

Explore the processing chain

A FINOS project, built in the open