topic Re: Github-allow access to specific repository in General Topics

Github-allow access to specific repository

SThatipelly — Tue, 06 Apr 2021 19:15:45 GMT

How do I block all Github but allow access to a specific repository? For eg. I want to allow https://github.com/cisagov and block all github using a single URL filtering policy. How can I do that?

I added github.com/* to custom URL list and set it to block.Created another security policy with a custom URL list containing the specific github page and set the action to allow. I was able to get to the page but the contents inside the page are incomplete. I am showing github pages render content from different pages like avatars.githubusercontent.com, github.githubassets.com etc.

How can I keep up with the change in future if I allow the extra sites for now?

Is there are any best way I can achieve this?

TIA.

Re: Github-allow access to specific repository

kiwi — Thu, 08 Apr 2021 12:56:30 GMT

Hi @SThatipelly ,

I don't see a way to have this automated.

I can only think about making the changes manually.

Cheers,

-Kiwi.

Re: Github-allow access to specific repository

nikoolayy1 — Thu, 08 Apr 2021 18:26:12 GMT

You may try making custom app-id signature for a REFERER Header. The idea is if the request for example for avatars.githubusercontent.com was made by the main URL https://github.com/cisagov then to allow it. If the user tries to access directly avatars.githubusercontent.com they should be blocked.

I have made post suggesting how this can be done:

https://live.paloaltonetworks.com/t5/automation-api-discussions/version-10-no-7-byte-limit-for-sinatures-examples-for-layer-7-l7/td-p/394734