mirror of
1
Fork 0
forgejo/services/actions
Gusted 77db7655e0
fix(sec): web route update and delete runner variables
The web route to update and delete variables of runners did not check if
the ID that was given belonged to the context it was requested in, this
made it possible to update and delete every existing runner variable of
a instance for any authenticated user.

The code has been reworked to always take into account the context of
the request (owner and repository ID).
2025-02-08 06:04:14 +00:00
..
auth.go allow the actions user to login via the jwt token (#32527) 2024-11-24 10:41:56 +00:00
auth_test.go Add testifylint to lint checks (#4535) 2024-07-30 19:41:10 +00:00
cleanup.go fix: clean up log files that no longer exist 2024-12-03 05:09:47 +01:00
cleanup_test.go fix: clean up log files that no longer exist 2024-12-03 05:09:47 +01:00
clear_tasks.go Use db.Find instead of writing methods for every object (#28084) 2023-11-24 03:49:41 +00:00
commit_status.go fix: Actions PR workflows must update the commit status 2024-11-04 11:27:14 +01:00
init.go Move notification interface to services layer (#26915) 2023-09-05 18:37:47 +00:00
interface.go feat(api): enhance Actions Secrets Management API for repository (#30656) 2024-04-28 15:39:01 +02:00
job_emitter.go Improve the handling of `jobs.<job_id>.if` (#31070) 2024-06-02 09:08:07 +02:00
job_emitter_test.go Improve the handling of `jobs.<job_id>.if` (#31070) 2024-06-02 09:08:07 +02:00
main_test.go tests: improve actvititypub integration test code 2024-11-01 22:39:49 +01:00
notifier.go fix: add label to issues and PR labeled/unlabeled events 2024-11-04 10:41:11 +01:00
notifier_helper.go Update scheduled tasks even if changes are pushed by "ActionsUser" (#32246) 2024-10-20 09:24:58 +02:00
notifier_helper_test.go Add testifylint to lint checks (#4535) 2024-07-30 19:41:10 +00:00
rerun.go Fix bugs in rerunning jobs (#29955) 2024-03-26 19:04:26 +01:00
rerun_test.go Fix bugs in rerunning jobs (#29955) 2024-03-26 19:04:26 +01:00
schedule_tasks.go Interpolate runs-on with variables when scheduling tasks (#30640) 2024-04-28 15:39:00 +02:00
variables.go fix(sec): web route update and delete runner variables 2025-02-08 06:04:14 +00:00
workflows.go style: reenable switch check 2024-08-18 15:19:01 +02:00