Software escrow github integration

Overview

Today, many software developers rely on GitHub and other source code management (SCM) repositories to manage and deploy source code. Iron Mountain has integrated deposits directly from GitHub as an escrow deposit option for developers. This means materials are always up-to-date and eliminates the need to push manual deposits, resulting in even greater protection.

Depositors can now have their escrow deposits submitted electronically to Iron Mountain using an integration to GitHub. This highly secure and reliable method simplifies how software developers can deposit their escrow materials by connecting their source code repositories to Iron Mountain's secure underground facility using Secure File Transfer Protocol (SFTP).

How does it work?

Depositors who use GitHub as their source code repository can provide Iron Mountain with their repository URL and security credentials. Iron Mountain's services are then connected to the depositor's remote GitHub repositories, and download (pull) the deposit files (source code) that will be stored securely with Iron Mountain. Once the deposit files are downloaded, the deposit will be processed and stored securely on a back-end server.

Benefits

• Set it and forget it... Make updates in your repository and Iron Mountain will automatically pick up the new deposit within hours
• Real-time email notification of deposit receipt or if there's an issue with the file retrieval
• Deposit is safely stored on Iron Mountain's secure servers in our underground vault, and replicated in a second underground facility

Getting Started

In order to connect to the GitHub remote repository, the depositor will need to provide Iron Mountain with the following information:

• GitHub Remote Repository URL
• GitHub Repository Access Token

Process Overview

• Depositor creates a remote repository that will be shared with Iron Mountain.
• Depositor generates an access token code in their remote repository, shares the token code and their remote repository URL to Iron Mountain.
• Iron Mountain stores the information given by the depositor into our database and generates a JSON file based on the information.
• Iron Mountain shares the JSON file with the SFTP server which will be used to securely connect and pull the files from the customer repository.
• Once the SFTP server receives the JSON file, the service is activated to run every 2 hours to pull any new deposit files.
• Depositor will receive receipt notifications for every new deposit that is retrieved.

NCC Group Software Resilience has acquired Iron Mountain’s Intellectual Property Management (IPM) business. For more information on the acquisition, please visit our dedicated information hub, or contact Iron Mountain IPM.

Get in touch