# GitProxy

> GitProxy is a self-hosted, open-source proxy that intercepts git push to enforce security policies like secret detection and commit validation.

- **Category:** Security
- **Licence:** Apache-2.0
- **Latest version:** v2.3.0
- **Open source:** oss
- **Languages:** Typescript
- **Platforms:** Docker, NPM, Build from Source
- **Tags:** Git, Proxy, Security, Devsecops, Gitops, Compliance, Policy enforcement, Push Protection, Secrets Detection, Finos, Scans

## Description

GitProxy is a self-hosted tool that sits between developers and Git servers like GitHub or GitLab to enforce custom push rules. Every push gets checked by a configurable pipeline — scanning for secrets with gitleaks, validating commit messages and author emails, detecting hidden commits, and running pre-receive hooks — before the push is either blocked or allowed through. It works the same way over both HTTP/HTTPS and SSH, with SSH agent forwarding keeping private keys on the developer's machine. You can install it via npm, run the Docker image from Docker Hub, or build from source. The web UI supports local accounts, ActiveDirectory/LDAP, and OpenID Connect for login. Data can be stored in an embedded file database (NeDB), MongoDB, or PostgreSQL. The project comes from the FINOS foundation and aims at regulated sectors like finance that need standard git workflows with compliance controls.

## Links

- [Homepage](https://github.com/finos/git-proxy)
- [Website](https://git-proxy.finos.org)
- [Docker](finos/git-proxy)
- [Documentation](https://git-proxy.finos.org/docs)
- [GitHub Repository](https://github.com/finos/git-proxy)
- [FINOS Slack](https://app.slack.com/client/T01E7QRQH97/C06LXNW0W76)
- [FINOS Website](https://finos.org)

---
Source: https://selfhost.directory/project/git-proxy