GitHub

To configure GitHub, enter the list of GitHub Enterprise IDs you want to allow access to.

Access to all other GitHib accounts will be blocked.

Default Bypass List

There are 3 GitHub domains in the Dope Default Bypass list that need to be set to 'Do Not Bypass', these are *.github.com , *.githubcopilot.com and *.githubusercontent.com.

If these domains are not set to 'Do Not Bypass' this GitHub CAC feature will not work correctly

SSL Cert Errors

Once these domains are set to 'Do Not Bypass' endpoints running the dope agent may see some SSL cert errors for GitHub traffic. To ensure this doesn't happen running the following commands on all endpoints will solve for this issue.

Windows

git config http.sslcainfo C:\ProgramData\dope.security\res\certs\dope.security.root.crt

macOS

git config http.sslcainfo /Library/Application\ Support/dope.security/res/certs/dope.security.root.crt