Integrating GitHub into Canvas Security Issues

[GeoffreyCox]

I am unsure if this is more of a GitHub or a Canvas question, but here goes. 

I recently sent an admin request to integrate GitHub into Canvas, but I was denied due to the following reason:

"Checked with our Information Security Officer and it has been determined that due to security concerns regarding GitHub, we cannot implement it into Canvas."

Does anyone know what security issues are associated with Canvas and GitHub? My research on this topic came up empty, so I was hoping someone here had some insight.  Thanks!

[mzimmerman · Accepted solution]

Hi @GeoffreyCox 

Every campus makes their own determination about security when deciding whether or not to allow particular integrations to be added to Canvas.  The only way you'll really know for sure is to ask your Information Security Officer specifically what their concerns were regarding the security of the Canvas / Gitlab integration.

[mzimmerman · Accepted solution]

Hi @GeoffreyCox 

Every campus makes their own determination about security when deciding whether or not to allow particular integrations to be added to Canvas.  The only way you'll really know for sure is to ask your Information Security Officer specifically what their concerns were regarding the security of the Canvas / Gitlab integration.

[Ron_Bowman]

@GeoffreyCox 

What @mzimmerman states is what you are seeing.  At my institution we put in a request for software we want to have installed on the room computers or for integration with Canvas.  That software is reviewed from a security point of view and also from a contractual licensing view (the lawyers) to see if it will be allowed.

From your post, the issue is not integrating github into canvas that has issues; rather they are stating there are security concerns/issues with git hub itself and therefore they won't consider integrating it.

Ron

[GeoffreyCox · Accepted solution]

As a follow-up, I contacted the IT department, and it seems @Ron_Bowman is correct. Here is an article that IT shared with me

https://thehackernews.com/2023/12/hackers-abusing-github-to-evade.html