trevato/forge-upstream
Public: anyone can read this; nobody can change it.
A software forge you can read in an afternoon and mold by hand.
- A host named in FORGE_ORIGIN_ALLOW can be mirrored as well as connected: its origin's git trusts it by name, as FORGE_OUTBOUND_TRUSTED_HOSTS does
- An account that can only read an origin repository proposes through its own fork there, and a protected repository is always proposed to that way
- On a host the operator names, an origin is refused when its account administers the instance or can push to a protected repository
- Connecting a token that lacks a scope names the scope, and the token form lists what a token needs
- The connect flow page goes on only to the authorize URL stored on the flow, so a crafted link cannot choose the client or the callback
- Inside an Actions job the gate reads bun's ::group:: file header, so a file red only beside others is run again alone