Ever wished to hide your identity in GitHub?. Most times you want exactly the opposite. When you're giving your time for free to help open source projects move along, you at least want to be recognized for that (and if this opens the door to possible employment opportunities, even better).
But sometimes be anonymous in GitHub is a requirement (at least for a while). Let me give you three examples of situations where being anonymous is desired:
- When you collaborate in projects that may be competitors to your current company (e.g. an open-source alternative to the proprietary software your company is selling)
- Or when you're a woman or, in general, belong to any kind of collective that could suffer negative discrimination in the evaluation of their work. In that case, unfortunately, there is real evidence that your work may be evaluated with a negative bias.
- You are a researcher and need to submit the results of your work (including the code to be able to replicate them) to a conference or journal for its evaluation. If the even is using a double-blind review evaluation method, reviewers should not be able to know or guess who you are. Obviously, hiding your name in the text of the article but then sending a link to your GitHub repo, reviewers will know your identity which defeats the purpose of a blind review (and even worse, your work could be immediately rejected because of that).
Note that each of the scenarios above is slightly different. In the last one, we want to anonymize the full repo. In the others, only our contributions to other repos. Also, in the first scenario, we want to keep our identity hidden forever (or a least for a long time), while in the other two, anonymity is just a temporal situation and we want to reveal our identify once the work has been evaluated. I will show a couple of solutions for each case. But to be clear, none is perfect. It's more a matter of making it difficult to know (or guess) who you than making it completely impossible.
How to anonymize a GitHub repo
Anonymous Github is a proxy server to support anonymous browsing of Github repositories for open-science code and data.
Instead of sending a link to your repo, you clone it with this service and send the link to their hosted version of the repo generated under the domain https://anonymous.4open.science/.
Beyond anonymizing the URL, this service also hides the Github owner, organization, repository name and, given a set of forbidden words, (like your name or that of your institution) it makes sure those words are not found in the README, file contents or filenames as you can see in this short animation.
How to anonymize your contributions to GitHub projects
There are two options I know of: GitMask and Anonydog. Both work in a similar way: they submit the Pull Requests on your behalf (and under their name) and take care of anonymizing your personal data (name, email, even timestamps) from the commits. While as we discussed above, this could prevent your PRs to be rejected based on your personal profile, it could also happen that the project decides to systematically reject anonymous PRs.
The main difference between the two is that with Anonydog you can, later on, reveal your real identity. Another difference is the way they need to be setup. With Anydog you need to first ask it to fork the project you plan to contribute to and then work on that forked version. With gitMask you work on your own and when ready you submit to gitMask a git bundle to anonymize.
Other alternatives to be in GitHub under an "incognito mode"
A more "exotic" way to be anonymous implies using Tor. For instance, this project explains how to submit anonymous commits over Tor. A more extreme alternative is to move the full collaborative development process to the "deep web" for software projects that are controversial.
Top comments (2)
Setting up a competitor to your current employer is unethical and often in breach of contract. Are you endorsing such behavior?
I'm not endorsing anything. Technology can always be used for good and bad purposes. Up to each one of us to know whether this action is justified or not.
(Also, there is a big difference to setting out to create a competitor to your current employer and contributing to an existing open source project that happens to be in the same space; maybe it's not even a direct competitor, in your opinion, but you prefer your employer not to know about it)