Just-in-time Reviews

This plugin allow teams to review commands before they are executed or allowing time based sessions.

Users are allowed to approve or revoke commands if they belong to an approval group. A command is only executed when all groups are approved.

Time Based Sessions (JIT)

When enabled for a connection, the user will be able to interact with the connection based on the requested time.

The command below asks for a 10 minutes access to the connection bash

shell
$ hoop connect bash --duration 10m
⣷ waiting session to be approved at https://use.hoop.dev/plugins/reviews/73a28154-58...

After approved, the user could connect again without prompting for review during 10 minutes.

A JIT review could be revoked.

It will ask for a review every time a command is issued.

shell
$ hoop exec bash -i 'ls -l'
⣷ waiting session to be approved at https://use.hoop.dev/plugins/reviews/73a28154-58...

Create the review plugin associating with the connection bash. Configure the approval groups sre and devops

shell
hoop admin create connection bash -a default -- bash
hoop admin create plugin review --overwrite --connection 'bash:sre;devops'

Create a connection and associate to the existing plugin review

shell
hoop admin create connection bash --overwrite -a default --plugin 'review:sre;devops' -- bash