forgejo/models/actions
Gusted 4c8c215b75
fix(sec): web route update and delete runner variables
The web route to update and delete variables of runners did not check if
the ID that was given belonged to the context it was requested in, this
made it possible to update and delete every existing runner variable of
a instance for any authenticated user.

The code has been reworked to always take into account the context of
the request (owner and repository ID).

(cherry picked from commit 5cb8fdfc8b9213cc368cd074aac93a1327ea20b0)
2025-02-08 07:50:19 +00:00
..
artifact.go Artifact deletion in actions ui (#27172) 2024-02-23 09:06:14 +01:00
forgejo.go [CLI] implement forgejo-cli 2024-02-05 13:33:58 +01:00
forgejo_test.go enable linter testifylint on v7 (#4572) 2024-07-30 19:42:06 +00:00
main_test.go Add unit tests for action runner token (#27670) 2023-10-19 07:24:24 +00:00
run.go badges: Relax the default workflow badge conditions 2024-05-20 10:47:25 +00:00
run_job.go Replace util.SliceXxx with slices.Xxx (#26958) 2023-09-07 09:37:47 +00:00
run_job_list.go Use db.Find instead of writing methods for every object (#28084) 2023-11-24 03:49:41 +00:00
run_list.go Fix schedule tasks bugs (#28691) 2024-03-25 16:25:02 +01:00
runner.go fix(sec): web route delete runner 2025-02-08 07:50:19 +00:00
runner_list.go Implement actions (#21937) 2023-01-31 09:45:19 +08:00
runner_token.go Fix typo "GetLatestRunnerToken" (#27680) 2023-10-18 15:52:44 +00:00
runner_token_test.go enable linter testifylint on v7 (#4572) 2024-07-30 19:42:06 +00:00
schedule.go Cancel previous runs of the same PR automatically (#29961) 2024-03-26 16:51:56 +01:00
schedule_list.go Avoid user does not exist error when detecting schedule actions when the commit author is an external user (#30357) (#30409) 2024-04-15 16:36:33 +02:00
schedule_spec.go chore(actions): support cron schedule task (#26655) 2023-08-24 03:06:51 +00:00
schedule_spec_list.go Use db.Find instead of writing methods for every object (#28084) 2023-11-24 03:49:41 +00:00
status.go Refactor locale&string&template related code (#29165) 2024-02-16 15:20:52 +01:00
task.go Fix ambiguous id when fetch Actions tasks (#30382) (#30383) 2024-04-15 16:25:23 +02:00
task_list.go Use db.Find instead of writing methods for every object (#28084) 2023-11-24 03:49:41 +00:00
task_output.go Fix no ActionTaskOutput table waring (#28149) 2023-11-21 08:02:51 +00:00
task_step.go Implement actions (#21937) 2023-01-31 09:45:19 +08:00
tasks_version.go Reduce unnecessary DB queries for Actions tasks (#25199) 2023-07-24 06:11:27 +00:00
utils.go Implement actions (#21937) 2023-01-31 09:45:19 +08:00
utils_test.go Implement actions (#21937) 2023-01-31 09:45:19 +08:00
variable.go fix(sec): web route update and delete runner variables 2025-02-08 07:50:19 +00:00