Issues

webhook add takes the secret on argv control security

#284 opened by cmc

hookd: restrict and authenticate the hook socket control security

#282 opened by cmc

token: expiring tokens cannot mint credentials; record creator; default read scope control migration security

#257 opened by cmc

Mentions do not notify control issues

#202 opened by cmc

No view of effective access on a repository; outsiders get inconsistent org answers control orgs

#200 opened by cmc

Notification preference: inbox without mail, and a default watch state control

#194 opened by cmc

No repository rename control

#190 opened by cmc

Default branch is hard-coded to main and nothing changes it bug control

#189 opened by cmc

Admin gating and ReadsStdin are per-handler conventions with no test control security

#127 opened by cmc · in v1.9.0

Output schemas are anonymous structs and maps control

#126 opened by cmc · in v1.12.0

Webhook events cover about half the mutations control web

#112 opened by cmc · in v1.13.0

Issue and MR duplicate comment, ref and author-or-write logic control

#110 opened by cmc · in v1.10.0

Dispatch pre-checks ignore --json cli control

#109 opened by cmc · in v1.10.0

Partial writes without compensation in merge, fork, transfer and quota bug control

#108 opened by cmc · in v1.10.0

Store errors surface as usage errors (exit 2 / HTTP 400) bug control

#107 opened by cmc · in v1.10.0

ReadOnly is one flag with four consequences and no test control security

#97 opened by cmc · in v1.9.0

Flag parsing is hand-rolled in 39 command bodies cli control

#96 opened by cmc · in v1.10.0