tangled.org / core
Monorepo for Tangled tangled.org
Star
Fork 233
Watch

Commits on dwn/spindle-mill

spindle: implement mill
Signed-off-by: dawn <dawn@tangled.org>
dwn/spindle-mill
dawn committed
spindle: add artifact store
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
netutil: extract common SSRF and secure-scheme guards
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
spindle/engines/microvm: only build on linux
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
spindle/engines/microvm,nix: dont hardcode x86 specific opt, allow for aarch64 images
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
lexicons,api,knotserver,appview: write repos by DID, negotiate per-knot
oyster.cafe committed
knot2/{index,xrpc}: take repoDID on writes & drop forkStatus
oyster.cafe committed
repoverify,xrpc,appview: reject repo whose knot won't ID an owner
oyster.cafe committed
appview/{issues,pulls}: check user auth on edit properly and write record to correct repo always
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
bobbin/crates/ingest: claim repo rkeys serially so we dont steal a rename and end up with wrong state
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
bobbin/crates/ingest: put upsert fields in box
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
gitutil,appview,knot{server,mirror,2}: etag archives & serve 304s
oyster.cafe committed
nix/spindle: add almalinux10 image
re:fi.64 committed
nix/spindle/alpine: refactor out common setup/runtime scripts
re:fi.64 committed
spindle/microvm: add support for using virtio+pci instead of mmio
re:fi.64 committed
api,lexicons,spindle,workflow: add pull request event types
Wilhelm Berggren committed
nix: add crates/ to rustSrc
oyster.cafe committed
gitutil,appview,knot{server,mirror}: serve archives standardized
oyster.cafe committed
lexicons/repo: allow null secrets response
Signed-off-by: noriaki watanabe <nabeyang@gmail.com>
noriaki watanabe committed
knot2/server,Containerfile: run key-fill & take its budget from config
oyster.cafe committed
knot2/keyfill: fill index w/ published keys off auth path
oyster.cafe committed
knot2/ssh: verify login name client asserts against published keys
oyster.cafe committed
knot2/index: test key set's leases, budget, sweep, work planning
oyster.cafe committed
knot2/index: watch account's published keys with lease & budget
oyster.cafe committed
knot2/atproto: cache claimed pubkeys & read missing did as gone
oyster.cafe committed
knot2/resource,fixtures: pace repeation lookups, turn off git auto-maintenance
oyster.cafe committed
spindle/engines/microvm: make cgroups tests compile on non-linux
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
knot2/idxwrite,shuttle/exec,.tangled: fix rust CI test fails
oyster.cafe committed
bobbin,knotmirror: read git thru mirror before knot
oyster.cafe committed
bobbin/crates/knot-proxy: add mirror client & git NSID routes
oyster.cafe committed
gitutil,knotmirror/xrpc: match tree/branch responses that knot serves
oyster.cafe committed
knotmirror/xrpc/gitea: read tree blob sizes from cat-file batch
oyster.cafe committed
knot2/resource: warn when one address takes most pre-auth refusals
oyster.cafe committed
bobbin/xrpc: forward client address that knot can rate-limit on
oyster.cafe committed
knot2/xrpc: read forwarded chain past every listed proxy
oyster.cafe committed
crates/trusted-proxies: shared proxy allowlist w/ CIDR & chain travarsal
oyster.cafe committed
.tangled: add commit message lint (git hook & ci)
Signed-off-by: Anirudh Oppiliappan <x@icyphox.sh>
Anirudh Oppiliappan committed
.tangled/workflows: run rust checks and tests
oyster.cafe committed
ogre: pluralize files changed count in PR og image
Kainoa Kanter committed
lexicons/repo: allow null languages response
Signed-off-by: noriaki watanabe <nabeyang@gmail.com>
noriaki watanabe committed
ogre: pluralize metrics
Kainoa Kanter committed
bobbin/resolver: set blobs on legacy issue & pull upgrades
oyster.cafe committed
bobbin/xrpc: forward X-Forwarded-For headers to knots
Aly Raffauf committed
bobbin: install rustls crypto provider explicitly
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
knot2: create fork pull request links on push
Signed-off-by: Will <did:plc:dadhhalkfcq3gucaq25hjqon>
willdot.net committed
cmd/zoekt-tngl-indexserver: validate branch names & object ids before running git
oyster.cafe committed
cmd/prefill-zoekt,zoekt-tngl-indexserver: type repoDIDs & knot URLs via repoident
oyster.cafe committed
repoverify,idresolver/mock: extract Describe, resolve knots via KnotURL
oyster.cafe committed
repoident: add KnotURL newtype which parses & canonicalizes knot endpoints
oyster.cafe committed
docs: fix dark mode on docsite
Signed-off-by: oppiliappan <me@oppi.li>
oppiliappan committed
nix: fix docs builds
Signed-off-by: oppiliappan <me@oppi.li>
oppiliappan committed
knot2/xrpc: honor forwarded-header only from `xrpc.trusted_proxies`
oyster.cafe committed
docs: use tangled.org (not .sh) for settings link in knot setup
Signed-off-by: tinybuttercom <184706546+tinybuttercom@users.noreply.github.com>
tinybuttercom committed
knot2/git: isolate repo open so ambient config can't inject archive filter driver
oyster.cafe committed
spindle/models: fix secret masker cutting off lines early
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
knot2/README.md: remove 'possibility' of upstream. it's happened
oyster.cafe committed
knot2/xrpc: tolerate old owner-name file remote
oyster.cafe committed
knot2/index: resolve clone path by display name when no rkey
oyster.cafe committed
appview/pages: pass resolver instead of nil in tests
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
spindle/models: hold back a trailing window so secrets split across log writes stay masked
Signed-off-by: dawn <dawn@tangled.org>
dawn committed