Commit history for src/server/events
- Security: INT-A1 verify GitHub push permission before push mirroring; INT-A2/A33 MergeFix requires base write, trailers, no-CI needs human; INT-A3/A4 legacy webhooks via guarded outbound client with encrypted secrets; INT-A5/A25/A27 detach integrations on transfer/delete, prune orphans and logs; INT-A26 hide installer repo list; INT-A28/A29 streamed inbound cap, strip auth on cross-origin redirect; INT-A6/A7/A8/A20/A22/A32 editor container cap, preview hardening, symlink-safe sync, non-root imagef2e2275⌁taigrr committed
- Relay imports ourselves: primary branch first, then backfill refs with an importing badge; token imports for private sources; working delete-and-retry; warm and batch the last-commit walk.7a72469⌁taigrr committed
- Merge roadmap/notify7417d6f⌁taigrr committed
- Merge roadmap/integrations95ebb35⌁taigrr committed
- Scope commit signature lookups to the repository, 404 on missing alerts, gate draft release assets, refuse private webhook targets, stop dequeued merges, report workflow compile failures, support git protocol v2 with the default branch as HEAD, and post every password form.20aff54⌁taigrr committed
- Merge roadmap/mcp0835f93⌁taigrr committed
- Merge roadmap/sites5b019ed⌁taigrr committed
- Merge roadmap/integrationsbe7d970⌁taigrr committed
- Fetch whole trees in one upload-pack request, cap and retry Artifacts calls per request, and skip Artifacts for repos that are not ready.c5e6e12⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
7f485b4⌁
- Merge roadmap/security: signatures, secret scanning, code scanning, advisories, dependency graphbad844a⌁taigrr committed
- real git forgebcc398c⌁taigrr committed