TechPrufer
Get started
GitLab
GitLab logoGitLab · Feature trail

Git Hooks

3 posts · Aug 2014 – May 2019

What this trail covers

GitLab Enterprise Edition offers a user-friendly interface for custom project-specific Git Hooks, allowing for rules on pushes such as enforcing commit message formats and preventing tag deletion. This post details a coordinated effort with Bitbucket and GitHub to educate users on secure best practices following a Git ransomware incident, emphasizing the importance of multi-factor authentication, strong passwords, and secure handling of personal access tokens and `.git` directories.

All GitLab trails
  1. Git ransom campaign incident reportThis post details a coordinated effort between GitLab, GitHub, and Bitbucket to educate users on secure best practices following a Git ransomware incident. It outlines the incident details, how user accounts were compromised (likely via external credential leakage), the ransom note, and the methods used by the attacker (automated Git pushes overwriting repositories). It provides guidance on how users can protect themselves by enabling multi-factor authentication, using strong and unique passwords, understanding the risks of personal access tokens, and avoiding exposure of `.git` directories and `.git/config` files. It also offers recovery steps for affected repositories and details platform-specific security features like token scanning and secrets detection.
  2. Git: Not just for developersThis post details how Eko uses GitLab CE to enable collaboration among non-developer professionals (video editors, designers) and developers on Interactive Video projects. Eko Studio acts as a Git client, abstracting Git operations for less technical users by translating project edits into Git commits. It leverages GitLab's API to create repositories, push initial commits, and uses webhooks combined with Firebase to update the Eko Studio UI upon commits. Developers use standard Git clients. This demonstrates a novel application of Git and GitLab for cross-disciplinary content creation workflows.
  3. Feature highlight: Git Hooks in GitLab Enterprise EditionThis post introduces the user-friendly interface for custom project-specific Git Hooks in GitLab Enterprise Edition, allowing for rules on pushes such as enforcing commit message formats (e.g., referencing JIRA issues) and preventing tag deletion. It details how to set these hooks via Project settings -> Git Hooks and encourages customers to request new hooks.