Commits

history of .gitbay/wiki/Architecture/10-Known-Gaps.org

• wiki, changelog: import-issues connects only to checked addresses

  cmc · 2026-09-29 02:51 UTC

  Verified · cmc 367c79588a

• wiki: SSRF control partial while import-issues fetches unpinned

  cmc · 2026-09-29 02:28 UTC

  Verified · cmc 0cd2b3a8ac

• wiki: Known-Gaps keeps the open #301 row

  cmc · 2026-09-29 02:16 UTC

  success Verified · cmc c2e04ef116

• wiki: web mints and grants need a sign-in from the last 15 minutes

  cmc · 2026-09-29 02:15 UTC

  Verified · cmc 273e9b95f8

• import: document the address check; e2e imports with allow_local

  cmc · 2026-09-29 00:29 UTC

  success Verified · cmc 592e7bcb92

• wiki: Known-Gaps keeps the open #298 row

  cmc · 2026-09-28 23:05 UTC

  Verified · cmc 539835bd23

• wiki: unkeyed audit chain, stall kill, enforced limits, pack-limit gaps

  cmc · 2026-09-28 22:56 UTC

  Verified · cmc 77ff123033

• gitbayd: one pack-generation limit for SSH, HTTP and git://

  cmc · 2026-09-28 22:35 UTC

  Verified · cmc 3035725993

• wiki: backup verify, backup lock, restore drill procedure

  cmc · 2026-09-28 22:15 UTC

  Verified · cmc 55cbdaf81e

• deploy, wiki: encrypted archives in the backup scripts and docs

  cmc · 2026-09-28 21:34 UTC

  failure Verified · cmc 03757af164

• deploy, wiki: provision and document the secret key file

  cmc · 2026-09-28 09:16 UTC

  success Verified · cmc 7e5de5325c

• wiki: reserved ci/ statuses, trusted reuse, required contexts

  cmc · 2026-09-28 07:04 UTC

  Verified · cmc d19e5181c5

• wiki: trusted and untrusted build homes

  cmc · 2026-09-28 06:36 UTC

  success Verified · cmc 7b644421d3

• audit: refused pushes, journal copy, admin audit verify

  cmc · 2026-09-28 21:34 UTC

  success Verified · cmc 0666c9f622

• sshd: mint a push token per receive-pack; hook sends it

  cmc · 2026-09-28 09:07 UTC

  success Verified · cmc 5c2215b845

• mirror: ignore operator gitconfig, require git 2.37; import SSRF gap documented

  cmc · 2026-09-28 08:52 UTC

  success Verified · cmc 298ac0b456

• mirror: check the address before each sync and pin git to it

  cmc · 2026-09-28 08:45 UTC

  Verified · cmc 869d5659fb

• mail: require TLS to a non-local relay; implicit TLS option

  cmc · 2026-09-28 08:33 UTC

  success Verified · cmc 01856d444d

• https: TLS 1.2 minimum, set explicitly

  cmc · 2026-09-28 08:25 UTC

  success Verified · cmc 928b919242

• web: login over SSH applies the login-link limit

  cmc · 2026-09-28 07:57 UTC

  success Verified · cmc 6f553fea02

• web: sessions list shows last use; docs for the idle timeout

  cmc · 2026-09-28 07:51 UTC

  Verified · cmc 0ff41e58be

• wiki: key expiry

  cmc · 2026-09-28 07:40 UTC

  Verified · cmc 1ed9fb9399

• wiki: delegation bound covers tokens and keys, not web sessions

  cmc · 2026-09-28 08:10 UTC

  success Verified · cmc e2a32d5f8d

• wiki: token delegation, read default; release note

  cmc · 2026-09-28 07:17 UTC

  success Verified · cmc 0787c7c07e

• wiki: revocation closes open connections

  cmc · 2026-09-28 06:44 UTC

  success Verified · cmc 4bbf4f8114

• wiki: Architecture overview names diagrams; titles drop their numbers; gaps filed

  cmc · 2026-09-28 04:31 UTC

  success Verified · cmc fc5b1b67a2

• wiki: architecture and security pages

  cmc · 2026-09-28 03:46 UTC

  success Verified · cmc 7a6343d02d