mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-24 06:34:33 +08:00
29 lines
1.1 KiB
YAML
29 lines
1.1 KiB
YAML
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
binary: /usr/bin/git
|
|
description: "Distributed version control system"
|
|
protocols:
|
|
- name: git-smart-http
|
|
transport: https
|
|
description: "Git smart HTTP protocol over HTTPS CONNECT tunnel — not REST, bypasses L7 HTTP inspection"
|
|
bypasses_l7: true
|
|
actions:
|
|
- { name: clone, type: read, description: "Clone/fetch repository" }
|
|
- { name: push, type: write, description: "Push commits to remote" }
|
|
- { name: force_push, type: destructive, description: "Force push, rewriting remote history" }
|
|
- name: git-ssh
|
|
transport: ssh
|
|
description: "Git over SSH"
|
|
bypasses_l7: true
|
|
actions:
|
|
- { name: clone, type: read }
|
|
- { name: push, type: write }
|
|
- { name: force_push, type: destructive }
|
|
spawns:
|
|
- /usr/lib/git-core/git-remote-https
|
|
- /usr/bin/ssh
|
|
can_exfiltrate: true
|
|
exfil_mechanism: "Commit data to repo and push, or encode in branch/tag names"
|
|
can_construct_http: false
|