Hacker Newsnew | past | comments | ask | show | jobs | submit | mfenniak's commentslogin

Forgejo's security team received disclosure of this issue on September 4th. (source: I am a member of that team)


(Thanks for your work!)

A basic API to access Actions logs was added in Forgejo v16. `/api/v1/repos/{owner}/{repo}/actions/jobs/{job_id}/logs`


Nice! I was hoping they would add this in v16. Unfortunately I am still on v15 of all my instances of Forgejo


Thanks to you I’ve now upgraded to v16, and can confirm the logs API works beautifully!


You may be violating Codeberg's rules. They are not a service for developmental of closed-source software.

https://docs.codeberg.org/getting-started/faq/#how-about-pri...


Forgejo is lightweight relative to some other options, but it is not resilient to scraping. Scrapers can access, commit-by-commit, each individual file, each file's "git blame", and each commit's repository archive... and they do. Most public Forgejo instances need to rely on a reverse proxy like Anubis or Iocaine in order to prevent server resources from being exhausted by bad actors. Or require sign-in for all access.

https://codeberg.org/forgejo/discussions/issues/320


That's not an API tool. It performs direct database access for administrative functions on the Forgejo server.

But there is a different tool that is an API accessing CLI: https://codeberg.org/forgejo-contrib/forgejo-cli


The other way around; Forgejo is a fork of Gitea.


Forgejo 15 was just released last week with repo-specific access tokens. More to come in the future.


It is kinda incorrect and kinda correct. Codeberg allows you to create private repositories. However, their rules are clear that the intent of private repositories must be in support of Free software projects: https://docs.codeberg.org/getting-started/faq/#how-about-pri..., which for many people is effectively not allowing private repositories.


My reading is: Don't attempt to store your media (photos, music, videos, etc.) collection there, and you won't have any issues.


I don't like how it reads differently based on perspectives, they should be crystal clear on what's allowed and what's not, but when they say '...unhappy about...' as a statement, it feels kinda amateur to me although I'm pretty sure the operators must be way capable than me lol.


Totally agreed. I get the feeling they have not yet had to draw too many lines in the sand... Yet. So they're probably keeping it flexible until they have to really start swinging the hammer.


This comes off as a please don’t make me tap the sign rule.

Imagine a food pantry that says please don’t come here if you make over 100k, but 100k + earners keep coming. Maybe they don’t enforce the rule, but your obviously showing disdain for basic rules


Forgejo is committed to using exclusively Free Software for it's own project development. Windows and Mac versions of the Forgejo Runner are built in the project's CI system as a minimal check to ensure platform compatibility, but due to the project's commitment, the project doesn't do integration testing on these platform. And therefore doesn't distribute untested software.

A contributor maintains a tested re-release of Forgejo Runner for Windows: https://github.com/Crown0815/Forgejo-runner-windows-builder

But, pull it down and build it, and it will work.


As a developer working on Forgejo -- glad you like it!


It hosts all the repositories backing applycreatures, we ran dozens of git projects on the same instance, have teams, you guys did a phenomenal work. I would say it's even easy to customise.

https://foja.applycreatures.com

Edit: it has a wonderful API so I posted the link it may tempt some to ditch MS/Azure hub.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: