wilb.me / core
Monorepo for Tangled
Star
Fork 0
Watch

Commits on master

nix: add crates/ to rustSrc master
oyster.cafe committed
gitutil,appview,knot{server,mirror}: serve archives standardized
oyster.cafe committed
lexicons/repo: allow null secrets response
Signed-off-by: noriaki watanabe <nabeyang@gmail.com>
noriaki watanabe committed
knot2/server,Containerfile: run key-fill & take its budget from config
oyster.cafe committed
knot2/keyfill: fill index w/ published keys off auth path
oyster.cafe committed
knot2/ssh: verify login name client asserts against published keys
oyster.cafe committed
knot2/index: test key set's leases, budget, sweep, work planning
oyster.cafe committed
knot2/index: watch account's published keys with lease & budget
oyster.cafe committed
knot2/atproto: cache claimed pubkeys & read missing did as gone
oyster.cafe committed
knot2/resource,fixtures: pace repeation lookups, turn off git auto-maintenance
oyster.cafe committed
spindle/engines/microvm: make cgroups tests compile on non-linux
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
knot2/idxwrite,shuttle/exec,.tangled: fix rust CI test fails
oyster.cafe committed
bobbin,knotmirror: read git thru mirror before knot
oyster.cafe committed
bobbin/crates/knot-proxy: add mirror client & git NSID routes
oyster.cafe committed
gitutil,knotmirror/xrpc: match tree/branch responses that knot serves
oyster.cafe committed
knotmirror/xrpc/gitea: read tree blob sizes from cat-file batch
oyster.cafe committed
knot2/resource: warn when one address takes most pre-auth refusals
oyster.cafe committed
bobbin/xrpc: forward client address that knot can rate-limit on
oyster.cafe committed
knot2/xrpc: read forwarded chain past every listed proxy
oyster.cafe committed
crates/trusted-proxies: shared proxy allowlist w/ CIDR & chain travarsal
oyster.cafe committed
.tangled: add commit message lint (git hook & ci)
Signed-off-by: Anirudh Oppiliappan <x@icyphox.sh>
Anirudh Oppiliappan committed
.tangled/workflows: run rust checks and tests
oyster.cafe committed
ogre: pluralize files changed count in PR og image
Kainoa Kanter committed
lexicons/repo: allow null languages response
Signed-off-by: noriaki watanabe <nabeyang@gmail.com>
noriaki watanabe committed
ogre: pluralize metrics
Kainoa Kanter committed
bobbin/resolver: set blobs on legacy issue & pull upgrades
oyster.cafe committed
bobbin/xrpc: forward X-Forwarded-For headers to knots
Aly Raffauf committed
bobbin: install rustls crypto provider explicitly
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
knot2: create fork pull request links on push
Signed-off-by: Will <did:plc:dadhhalkfcq3gucaq25hjqon>
willdot.net committed
cmd/zoekt-tngl-indexserver: validate branch names & object ids before running git
oyster.cafe committed
cmd/prefill-zoekt,zoekt-tngl-indexserver: type repoDIDs & knot URLs via repoident
oyster.cafe committed
repoverify,idresolver/mock: extract Describe, resolve knots via KnotURL
oyster.cafe committed
repoident: add KnotURL newtype which parses & canonicalizes knot endpoints
oyster.cafe committed
docs: fix dark mode on docsite
Signed-off-by: oppiliappan <me@oppi.li>
oppiliappan committed
nix: fix docs builds
Signed-off-by: oppiliappan <me@oppi.li>
oppiliappan committed
knot2/xrpc: honor forwarded-header only from `xrpc.trusted_proxies`
oyster.cafe committed
docs: use tangled.org (not .sh) for settings link in knot setup
Signed-off-by: tinybuttercom <184706546+tinybuttercom@users.noreply.github.com>
tinybuttercom committed
knot2/git: isolate repo open so ambient config can't inject archive filter driver
oyster.cafe committed
spindle/models: fix secret masker cutting off lines early
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
knot2/README.md: remove 'possibility' of upstream. it's happened
oyster.cafe committed
knot2/xrpc: tolerate old owner-name file remote
oyster.cafe committed
knot2/index: resolve clone path by display name when no rkey
oyster.cafe committed
appview/pages: pass resolver instead of nil in tests
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
spindle/models: hold back a trailing window so secrets split across log writes stay masked
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
spindle/microvm: bind qmp sockets ourselves at 0600 and pass qemu the fd
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
spindle/microvm: cap each workflow vm's cpu and io in its cgroup
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
spindle/microvm: key the activation config cache per repo so tenants can't poison each other's toplevels
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
spindle/netguard: refuse to dial internal addresses on user-controlled fetches
Signed-off-by: dawn <dawn@tangled.org>
dawn committed
knot2/ssh: force no compression bc makes no sense
oyster.cafe committed
appview/pages/markup: render attached images
Signed-off-by: Wilhelm Berggren <wilhelmberggren@gmail.com>
Signed-off-by: Seongmin Lee <git@boltless.me>
Wilhelm Berggren committed
appview: upload images as blobs (pulls)
Signed-off-by: Wilhelm Berggren <wilhelmberggren@gmail.com>
Signed-off-by: Seongmin Lee <git@boltless.me>
Wilhelm Berggren committed
appview: upload images as blobs (issues)
Signed-off-by: Wilhelm Berggren <wilhelmberggren@gmail.com>
Signed-off-by: Seongmin Lee <git@boltless.me>
Wilhelm Berggren committed
appview/pages/templates: rename blob field name
Signed-off-by: Wilhelm Berggren <wilhelmberggren@gmail.com>
Signed-off-by: Seongmin Lee <git@boltless.me>
Wilhelm Berggren committed
lexicons: add blobs field to `repo.{issue,pull}`
Signed-off-by: Wilhelm Berggren <wilhelmberggren@gmail.com>
Signed-off-by: Seongmin Lee <git@boltless.me>
Wilhelm Berggren committed
knot2/xrpc: hidden staging ref read
oyster.cafe committed
spindle: fix skipped tests not actually being skipped
re:fi.64 committed
knot2/xrpc: forks take upstream's object format
oyster.cafe committed
nix: package knot-server and knot-migrate, add a nixos module
oyster.cafe committed
appview/{config,state}: gate xrpc router behind TANGLED_XRPC_ENABLED
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>
Anirudh Oppiliappan committed
appview/xrpc: handlers for "private" xrpc service
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>
Anirudh Oppiliappan committed