This is the container image for HackerOne Code's On-Premise Proxy — a service you run inside your own infrastructure to connect an on-premise code hosting provider (GitHub Enterprise Server, GitLab, Bitbucket Data Center, or Azure DevOps Server) to the HackerOne Code platform.

docker pull hackertwo/hackerone-code-proxy:<version>

Use the version your account team recommends, or latest for the most recent release.

For defense-in-depth, we recommend adding these flags to whatever docker run or Compose configuration you use to run the proxy:

--cap-drop=ALL --security-opt=no-new-privileges

• --cap-drop=ALL removes every Linux capability the container is granted by default (raw sockets, SETUID/SETGID, etc.) — the proxy doesn't need any of them.
• --security-opt=no-new-privileges prevents any process inside the container from gaining additional privileges at runtime.

Neither flag changes normal operation. The container still needs a writable volume mounted at /app/storage for its local repository cache regardless of these flags.

Installation, configuration, and upgrade instructions live in the customer documentation:

docs.pullrequest.com/on-premise-server

If you run into issues running the proxy, reach out to your HackerOne Code account team.