Commit history for src/server/git/proxy.ts
- Harden the git proxy and bridges before deploy: trust only ok'd refs, restrict v2 commands, fail closed on unloadable thin-pack bases, rate-limit before auth, shorten public raw caching, and charge bridged bytes to the head owner (CI-P6, GIT-P4..P7, P9..P12, GIT-14/PR-12).23526ca⌁taigrr committed
- abuse and metering486d635⌁taigrr committed
a360a78⌁
- Accept pushes to scratch repositories only with their scratch push token, and return 422 for case-insensitive duplicate labels.f760be0⌁taigrr committed
- Merge roadmap/integrations95ebb35⌁taigrr committed
- Merge roadmap/sites7e7a8a7⌁taigrr committed
- Merge roadmap/metering71afa5f⌁taigrr committed
- Scope commit signature lookups to the repository, 404 on missing alerts, gate draft release assets, refuse private webhook targets, stop dequeued merges, report workflow compile failures, support git protocol v2 with the default branch as HEAD, and post every password form.20aff54⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
- Merge roadmap/security: signatures, secret scanning, code scanning, advisories, dependency graphbad844a⌁taigrr committed
- real git forgebcc398c⌁taigrr committed