le-git-imate is a defense mechanism to mitigate attacks against web-based Git hosting services such as GitHub and GitLab. le-git-imate pioneers the ability to sign a web UI commit and to create a true GPG-signed Git commit object in the browser. For more technical details, please refer to our paper le-git-imate: Towards Verifiable Web-based Git Repositories.

le-git-imate can be installed as an unpacked extension in the Chrome browser as follows:

1. Download the latest version of the extension at the releases section.

2. Unzip the extension.

3. On your Chrome browser, go to chrome://extensions.

4. Enable the Developer mode.

5. Click on Load Unpacked and select the Unzip folder.

To the best use of le-git-imate, it is recommended that you take a look at the issue tracker before trying it out.

Security issues, bugs and feature requests can be reported through GitHub issue tracker. Ideally, an issue documented as follows:

• Description of issue or feature request
• Current behavior
• Expected behavior

Use of this source code is governed by the Licensed under the Apache License, Version 2.0 that can be found in the LICENSE file.

https://le-git-imate.github.io/

This project is managed by Prof. Reza Curtmola and other members of the NJIT Cybersecurity Research Center at NJIT and the Secure Systems Lab at NYU.

Contact: [email protected]