Integrate a new Microsoft OneDrive Source (Beta)

GitGuardian securely connects to your Microsoft 365 environment using a Microsoft Entra ID Enterprise application with read-only access to your SharePoint sites.

OneDrive is tied to SharePoint Online, i.e. any content seen from OneDrive is hosted on a SharePoint Online tenant. The OneDrive integration will only scan users content (private or shared) hosted on your SharePoint Online tenant, and will only support OneDrive for business. Please consider using the Microsoft SharePoint Online integration to scan any other SharePoint sites and drives content.

info

Plan requirements: Available for GitGuardian Business and Enterprise plans. Try it for free with a 30-day trial - any detected incidents remain accessible after the trial ends.
Detector coverage: To minimize false positives, the Generic High Entropy Secret and Generic Password are disabled. All other detectors are enabled.

Prerequisites: To enable the integration you will need:

• Owner or Manager account on your GitGuardian Dashboard
• Microsoft 365 Administrator or SharePoint Administrator permissions in your tenant.

Integration with GitGuardian SaaS

1. Prepare your environment

   • Ensure you have an administrator account on your Microsoft 365 organization, with the necessary permissions to install Microsoft Entra ID Enterprise applications.

2. Install the integration

   • Navigate to Sources integration
   • Find Microsoft OneDrive in the File Storage section. You may use the search bar to quickly find the integration.
   • Click Install

   

3. Authorize GitGuardian

   • Click Install on the integration page
   • Select your Microsoft 365 administrator account when prompted
   • Review and accept the requested permissions

   

That's it! GitGuardian immediately begins scanning your files and starts monitoring for new secrets.

Customizing your monitored perimeter

Microsoft OneDrive integration offers flexible perimeter control: choose which specific accounts content to monitor, giving you precise control over your scanning scope.

To customize your perimeter:

1. Navigate to your integration settings
2. Use the checkboxes to enable or disable monitoring for specific accounts.
3. Click on Save to apply your changes.
4. Changes take effect immediately for new scans.

Understanding scanning capabilities

Historical scanning

Uncover your secret debt: When you first integrate Microsoft OneDrive, GitGuardian performs a comprehensive scan of your entire file history, based on the customized perimeter. This reveals secrets that may have been exposed weeks, months, or even years ago - helping you address your existing security debt.

Real-time scanning

Catch new exposures: Once integrated, GitGuardian continuously monitors your Microsoft OneDrive files. Any new or modified files containing secrets are detected promptly, allowing you to respond quickly to new exposures.

Comprehensive file support

GitGuardian integration supports a various range of files type:

1. Text and code files:

• Source code (.py, .js, .java, .cpp, .cs, .rb, .go, .php, etc.)
• Configuration files (.yaml, .json, .xml, .ini, .conf, .properties, etc.)
• Documentation (.txt, .md, .rst, .log, etc.)

2. Office documents:

• Microsoft Office (.docx, .xlsx, .pptx, .doc, .xls, .ppt)
• OpenOffice/LibreOffice (.odt, .ods, .odp)
• Rich text formats (.rtf)
• Others (.epub)

3. Archive and compressed files (experimental):

• Archive formats (.zip, .7z, .rar, .tar, .gz, .tgz or .tar.gz, .bz2, .tbz2 or .tar.bz2, .xz, .txz or .tar.xz, .ar, .cpio, .pack)
• Container images (through .tar extensions)

4. Other document formats:

• PDF documents (.pdf)
• Email formats (.eml, .msg)
• Web files (.html, .css)

File size considerations: Large files are skipped to maintain optimal performance. Size thresholds are as follows:

• 100 MB for any text file type.
• 500 MB for PDFs.
• 1 GB for any other file type listed.

Managing your integration

Monitor integration health

Track your scanning progress and integration status from the integration dashboard.

Integration maintenance

If you need to modify your integration settings or troubleshoot connectivity issues, access the management interface through Sources integration.

Uninstalling the integration

While our goal is to help you maintain comprehensive security coverage, you may uninstall the integration whenever necessary:

1. Navigate to Sources integration
2. Click Edit next to Microsoft OneDrive
3. Click Configure
4. Click the delete icon next to your tenant
5. Confirm the removal

Note: Removing the integration preserves your incident history but stops future scanning. To completely remove the GitGuardian app from Azure, delete it from your Entra ID registered applications.

Current considerations

While Microsoft OneDrive integration offers comprehensive coverage, here are some current considerations:

• Team access: Users must be in the 'All-incidents' team to view OneDrive incidents (enhanced team management coming in future updates).
• Source visibility: All sources appear as private in the UI.
• Incident context: Secret matches are shown in incident details, with full file context previews planned for upcoming versions.
• Archive path: While archives scanning are supported, the complete path of the file in the archive will not be provided in the incident detail. Only the archive name (capability coming in future updates).

Privacy and compliance

Data handling

GitGuardian processes your files solely to detect exposed secrets.

• Read-only access: We never modify your files or OneDrive structure.
• Minimal data retention: We store only data and metadata necessary for incident management.
• Encryption: All data in transit and at rest is encrypted.
• Compliance: We follow the same data protection standards as our other integrations.

Regional considerations

Ensure your GitGuardian deployment region aligns with your data residency requirements. Contact support if you need guidance on compliance with local regulations.

User notification

Country-specific laws and regulations may require you to inform your Microsoft 365 users that your OneDrive users' files are being scanned for secrets. Here is a suggestion for a message you may want to use:

As part of our internal information security process, the company scans the OneDrive files for potential secrets leaks using GitGuardian. All data collected will be processed for the purpose of detecting potential leaks. To find out more about how we manage your personal data and to exercise your rights, please refer to our employee/partner privacy notice. Please note that only sites and files relating to the company's activity and business may be monitored and that users shall refrain from sharing personal or sensitive data not relevant to the site's or file's purpose.