le-git-imate is a defense mechanism to mitigate attacks against web-based Git hosting services such as GitHub and GitLab.
le-git-imate pioneers the ability to sign a web UI commit and to create a true GPG-signed Git commit object in the browser.
For more technical details, please refer to our paper
le-git-imate: Towards Verifiable Web-based Git Repositories.
le-git-imate can be installed as an unpacked extension in the Chrome browser as follows:
-
Download the latest version of the extension at the releases section.
-
Unzip the extension.
-
On your Chrome browser, go to
chrome://extensions. -
Enable the
Developer mode. -
Click on
Load Unpackedand select the Unzip folder.
To the best use of le-git-imate, it is recommended that you take a look at the issue tracker before trying it out.
Security issues, bugs and feature requests can be reported through GitHub issue tracker. Ideally, an issue documented as follows:
- Description of issue or feature request
- Current behavior
- Expected behavior
Use of this source code is governed by the Licensed under the Apache License, Version 2.0 that can be found in the LICENSE file.
https://le-git-imate.github.io/
This project is managed by Prof. Reza Curtmola and other members of the NJIT Cybersecurity Research Center at NJIT and the Secure Systems Lab at NYU.
Contact: hammad.afzali@gmail.com