gitea-mirror

adam/gitea-mirror

0 Fork 0

mirror of https://github.com/RayLabsHQ/gitea-mirror.git synced 2026-10-30 22:21:58 +01:00

Commit Graph

Author	SHA1	Message	Date
ARUNAVO RAY	7d17194e51	fix: review follow-ups for the organizations dialog and multi-source gating (#406 ) Review follow-ups after #403 and #404: dialog copy and placeholder, forge-aware owner parser, GitHub only mirror switches available while any connected source is GitHub, configuration header copy, self-contained encryption test. Also builds the Sources card token settings link from validated URL parts (CodeQL alert) and adds a VEX statement for CVE-2026-85091 in zlib, which nothing in the image can reach.	2026-09-07 06:49:21 +05:30
ARUNAVO RAY	4a40497ff2	fix(security): clear the util-linux and git-lfs scan alerts (#402 ) Strip setuid bits and add an OpenVEX exception for the three util-linux CVEs Debian will not fix in trixie, pin golang.org/x/crypto 0.56.0 and x/net 0.58.0 in the git-lfs build, and build git-lfs with Go 1.27.1.	2026-09-04 07:53:47 +05:30

Author

SHA1

Message

Date

ARUNAVO RAY

7d17194e51

fix: review follow-ups for the organizations dialog and multi-source gating (#406 )

Review follow-ups after #403 and #404: dialog copy and placeholder, forge-aware owner parser, GitHub only mirror switches available while any connected source is GitHub, configuration header copy, self-contained encryption test. Also builds the Sources card token settings link from validated URL parts (CodeQL alert) and adds a VEX statement for CVE-2026-85091 in zlib, which nothing in the image can reach.

2026-09-07 06:49:21 +05:30

ARUNAVO RAY

4a40497ff2

fix(security): clear the util-linux and git-lfs scan alerts (#402 )

Strip setuid bits and add an OpenVEX exception for the three util-linux CVEs Debian will not fix in trixie, pin golang.org/x/crypto 0.56.0 and x/net 0.58.0 in the git-lfs build, and build git-lfs with Go 1.27.1.

2026-09-04 07:53:47 +05:30