-
GitGoat
GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfiguration prevention strategy. It can be used to test products with access to GitHub repositories without a risk to your production environment.
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
The downside is that developers can choose to avoid using one of the controls above, such as enabling MFA. In that case, the developers will likely prefer to create a new account and the use git config user.email [personal_email] to add the stats to their accounts. It will require the company to work harder on mapping the author (from the git config) to the pusher of the code (arnica.io correlates this data in the GitHub user inventory, so it is possible to solve with some engineering work).
Related posts
-
GitGoat v2 is released – fake commits with real vulnerable code
-
GitGoat v2 is released: multiple vulnerable projects with amended commit history
-
Show HN: GitGoat v2 is released – fake commits with real vulnerable code
-
Try to take permissions from devs…
-
Tell HN: GitHub Apps bug created tokens with elevated privileges