mirror of https://github.com/go-gitea/gitea.git
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
edf98a2dc3
Currently, Gitea will run actions automatically which are triggered by fork pull request. It's a security risk, people can create a PR and modify the workflow yamls to execute a malicious script. So we should require approval for first-time contributors, which is the default strategy of a public repo on GitHub, see [Approving workflow runs from public forks](https://docs.github.com/en/actions/managing-workflow-runs/approving-workflow-runs-from-public-forks). Current strategy: - don't need approval if it's not a fork PR; - always need approval if the user is restricted; - don't need approval if the user can write; - don't need approval if the user has been approved before; - otherwise, need approval. https://user-images.githubusercontent.com/9418365/217207121-badf50a8-826c-4425-bef1-d82d1979bc81.mov GitHub has an option for that, you can see that at `/<owner>/<repo>/settings/actions`, and we can support that later. <img width="835" alt="image" src="https://user-images.githubusercontent.com/9418365/217199990-2967e68b-e693-4e59-8186-ab33a1314a16.png"> --------- Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> |
2 years ago | |
|---|---|---|
| .. | ||
| actions | 2 years ago | |
| activity.go | 2 years ago | |
| attachment.go | 2 years ago | |
| blame.go | 2 years ago | |
| branch.go | 2 years ago | |
| cherry_pick.go | 2 years ago | |
| commit.go | 2 years ago | |
| compare.go | 2 years ago | |
| download.go | 2 years ago | |
| editor.go | 2 years ago | |
| editor_test.go | 2 years ago | |
| find.go | 2 years ago | |
| http.go | 2 years ago | |
| http_test.go | 2 years ago | |
| issue.go | 2 years ago | |
| issue_content_history.go | 2 years ago | |
| issue_dependency.go | 2 years ago | |
| issue_label.go | 2 years ago | |
| issue_label_test.go | 2 years ago | |
| issue_lock.go | 2 years ago | |
| issue_stopwatch.go | 2 years ago | |
| issue_test.go | 2 years ago | |
| issue_timetrack.go | 2 years ago | |
| issue_watch.go | 2 years ago | |
| lfs.go | 2 years ago | |
| main_test.go | 2 years ago | |
| middlewares.go | 2 years ago | |
| migrate.go | 2 years ago | |
| milestone.go | 2 years ago | |
| packages.go | 2 years ago | |
| patch.go | 2 years ago | |
| projects.go | 2 years ago | |
| projects_test.go | 2 years ago | |
| pull.go | 2 years ago | |
| pull_review.go | 2 years ago | |
| release.go | 2 years ago | |
| release_test.go | 2 years ago | |
| render.go | 2 years ago | |
| repo.go | 2 years ago | |
| runners.go | 2 years ago | |
| search.go | 2 years ago | |
| setting.go | 2 years ago | |
| setting_protected_branch.go | 2 years ago | |
| setting_secrets.go | 2 years ago | |
| settings_test.go | 2 years ago | |
| tag.go | 2 years ago | |
| topic.go | 2 years ago | |
| treelist.go | 2 years ago | |
| view.go | 2 years ago | |
| view_test.go | 2 years ago | |
| webhook.go | 2 years ago | |
| wiki.go | 2 years ago | |
| wiki_test.go | 2 years ago | |
