bircni ad05aaee80 fix(actions): enforce fork pull request trust boundaries (#39005) ...

Preserve fork pull request restrictions across review-triggered
workflows, reusable workflow access, job scheduling, and filtered
workflow statuses.

This prevents untrusted fork workflow content from bypassing approval,
accessing private reusable workflows, or satisfying protected status
checks.


_Assisted-by: Codex:GPT-5_

2026-08-21 12:35:28 +00:00

..

approve_test.go

feat(actions): Add Actions API endpoints for workflow run management and logs (#35382)

2026-08-02 12:22:07 +08:00

approve.go

feat(actions): Add Actions API endpoints for workflow run management and logs (#35382)

2026-08-02 12:22:07 +08:00

artifacts.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

auth_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

auth.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

cancel.go

feat(actions): add force-cancel workflow run API (#38756)

2026-08-07 14:38:14 +00:00

cleanup.go

chore: rename act_runner references to runner (#38791)

2026-08-05 18:53:50 +02:00

clear_tasks_test.go

fix(actions): correctness and hardening fixes (#38518)

2026-07-25 16:07:40 +00:00

clear_tasks.go

feat(actions): add force-cancel workflow run API (#38756)

2026-08-07 14:38:14 +00:00

commit_status_test.go

chore: still keep ctx in git.Repository struct for cat-file batch command (#38684)

2026-07-28 17:04:22 +00:00

commit_status.go

feat: Add support for dynamic matrix evaluation in Gitea Actions workflows (#36564)

2026-07-28 15:59:00 +00:00

concurrency.go

fix(actions): keep github.event.inputs as strings for workflow_dispatch (#38899)

2026-08-13 09:36:41 +02:00

context_test.go

fix(actions): keep github.event.inputs as strings for workflow_dispatch (#38899)

2026-08-13 09:36:41 +02:00

context.go

enhance(actions): set ref_protected in context (#38852)

2026-08-10 22:55:29 +02:00

helper_test.go

fix(actions): keep github.event.inputs as strings for workflow_dispatch (#38899)

2026-08-13 09:36:41 +02:00

helper.go

fix(actions): keep github.event.inputs as strings for workflow_dispatch (#38899)

2026-08-13 09:36:41 +02:00

init_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

init.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

interface.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

job_emitter_test.go

fix(actions): enforce fork pull request trust boundaries (#39005)

2026-08-21 12:35:28 +00:00

job_emitter.go

fix(actions): enforce fork pull request trust boundaries (#39005)

2026-08-21 12:35:28 +00:00

matrix_test.go

fix(actions): dynamic matrix expansion correctness fixes (#38690)

2026-07-30 09:13:47 +00:00

matrix.go

fix(actions): dynamic matrix expansion correctness fixes (#38690)

2026-07-30 09:13:47 +00:00

max_parallel_test.go

feat(actions): Add Actions API endpoints for workflow run management and logs (#35382)

2026-08-02 12:22:07 +08:00

max_parallel.go

fix(actions): dynamic matrix expansion correctness fixes (#38690)

2026-07-30 09:13:47 +00:00

notifier_helper_test.go

fix(actions): enforce fork pull request trust boundaries (#39005)

2026-08-21 12:35:28 +00:00

notifier_helper.go

fix(actions): enforce fork pull request trust boundaries (#39005)

2026-08-21 12:35:28 +00:00

notifier.go

fix(actions): enforce fork pull request trust boundaries (#39005)

2026-08-21 12:35:28 +00:00

notify.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

permission_parser_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

permission_parser.go

fix: resolve YAML anchors and aliases in Actions workflows (#38984)

2026-08-20 05:03:10 +00:00

rerun_test.go

fix(actions): dynamic matrix expansion correctness fixes (#38690)

2026-07-30 09:13:47 +00:00

rerun.go

fix(actions): keep github.event.inputs as strings for workflow_dispatch (#38899)

2026-08-13 09:36:41 +02:00

reusable_workflow_test.go

fix(actions): resolve pull_request_target reusable workflows at the base commit (#38886)

2026-08-12 19:03:44 +02:00

reusable_workflow.go

fix(actions): resolve pull_request_target reusable workflows at the base commit (#38886)

2026-08-12 19:03:44 +02:00

run.go

refactor: use the shared workflow model from actionslib (#38768)

2026-08-07 20:56:40 -07:00

schedule_tasks_test.go

chore: enable forcetypeassert linter, fix issues (#38804)

2026-08-09 10:25:06 +00:00

schedule_tasks.go

fix(actions): populate github.event for scheduled runs (#38446)

2026-07-14 18:30:16 +02:00

scoped_workflow_cache.go

chore: still keep ctx in git.Repository struct for cat-file batch command (#38684)

2026-07-28 17:04:22 +00:00

task_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

task.go

refactor: use the shared workflow model from actionslib (#38768)

2026-08-07 20:56:40 -07:00

token_permission_design.md

feat: Add configurable permissions for Actions automatic tokens (#36173)

2026-03-21 15:39:47 -07:00

variables.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

workflow_test.go

fix(actions): keep github.event.inputs as strings for workflow_dispatch (#38899)

2026-08-13 09:36:41 +02:00

workflow.go

fix: resolve YAML anchors and aliases in Actions workflows (#38984)

2026-08-20 05:03:10 +00:00