1. Nov 08, 2023
    • Yuri Volkov's avatar
      Fixing gitspiegel trigger workflow · a00d7734
      Yuri Volkov authored
      The first attept to use a workflow to protect GitLab CI from untrusted contributors failed, because GitHub doesn't pass secrets to workflows for PRs that originate from forks. 
       
      This uses a different approach: instead of triggerring gitspiegel API directly from the workflow, we're just spawning an empty workflow with a specific path, and gitspiegel listens for `workflow_run` event to start mirroring.  
      
      The idea is the same: for the first-time contributors, running workflows would require manual aciton and that would block mirroring. But this time, we don't need any secrets to make it work.
      a00d7734
  2. Nov 01, 2023
    • Yuri Volkov's avatar
      Adding gitspiegel-trigger workflow · 6ee63aa0
      Yuri Volkov authored
      Using a workflow to trigger mirroring instead of a webhook allows us to reuse "Approving workflow runs from public forks" GitHub feature to somewhat protect us from malicious PRs
      6ee63aa0
  3. Oct 18, 2022
  4. Apr 25, 2022
  5. Apr 22, 2022
  6. Apr 21, 2022
  7. Apr 20, 2022
  8. Dec 28, 2021
  9. Dec 27, 2021
  10. Nov 19, 2021
  11. Nov 18, 2021
  12. Nov 17, 2021
  13. Nov 16, 2021
  14. Oct 26, 2021
  15. Oct 25, 2021
  16. Oct 21, 2021