Skip to content

mirror: connect only to the address checked at sync time !493

merged merged by cmc on 2026-09-28 21:50 UTC · krz/gitbay:mirror-pin-address into main

mirror: ignore operator gitconfig, require git 2.37; import SSRF gap documented

cmc · 2026-09-28 08:52 UTC

Verified · cmc 298ac0b456
mirror: check the address before each sync and pin git to it

cmc · 2026-09-28 08:45 UTC

Verified · cmc 869d5659fb
webhook: refuse shared (100.64.0.0/10) and multicast addresses

cmc · 2026-09-28 08:45 UTC

Verified · cmc 0babae2db0
webhook: CheckAddrs for callers that resolve before connecting

cmc · 2026-09-28 08:37 UTC

Verified · cmc 7673081613