forgejo/models/actions
Gusted 5b30b7dc6f
fix(sec): web route delete runner
The web route to delete action runners did not check if the ID that was
given belonged to the context it was requested in, this made it possible
to delete every existing runner of a instance by a authenticated user.

The code was reworked to ensure that the caller of the delete
runner function retrieved the runner by ID and then checks if it belongs
to the context it was requested in, although this is not an optimal
solution it is consistent with the context checking of other code for
runners.

(cherry picked from commit 567765be03d56d6c8c36bb783c330c8ca70b1aca)

Conflicts:
	models/actions/runner.go
	models/actions/runner_test.go
  conflicting UUID bug fix and associated tests do not exist
2025-02-08 07:50:19 +00:00
..
artifact.go Artifact deletion in actions ui (#27172) 2024-02-23 09:06:14 +01:00
forgejo.go [CLI] implement forgejo-cli 2024-02-05 13:33:58 +01:00
forgejo_test.go enable linter testifylint on v7 (#4572) 2024-07-30 19:42:06 +00:00
main_test.go Add unit tests for action runner token (#27670) 2023-10-19 07:24:24 +00:00
run.go badges: Relax the default workflow badge conditions 2024-05-20 10:47:25 +00:00
run_job.go Replace util.SliceXxx with slices.Xxx (#26958) 2023-09-07 09:37:47 +00:00
run_job_list.go Use db.Find instead of writing methods for every object (#28084) 2023-11-24 03:49:41 +00:00
run_list.go Fix schedule tasks bugs (#28691) 2024-03-25 16:25:02 +01:00
runner.go fix(sec): web route delete runner 2025-02-08 07:50:19 +00:00
runner_list.go Implement actions (#21937) 2023-01-31 09:45:19 +08:00
runner_token.go Fix typo "GetLatestRunnerToken" (#27680) 2023-10-18 15:52:44 +00:00
runner_token_test.go enable linter testifylint on v7 (#4572) 2024-07-30 19:42:06 +00:00
schedule.go Cancel previous runs of the same PR automatically (#29961) 2024-03-26 16:51:56 +01:00
schedule_list.go Avoid user does not exist error when detecting schedule actions when the commit author is an external user (#30357) (#30409) 2024-04-15 16:36:33 +02:00
schedule_spec.go chore(actions): support cron schedule task (#26655) 2023-08-24 03:06:51 +00:00
schedule_spec_list.go Use db.Find instead of writing methods for every object (#28084) 2023-11-24 03:49:41 +00:00
status.go Refactor locale&string&template related code (#29165) 2024-02-16 15:20:52 +01:00
task.go Fix ambiguous id when fetch Actions tasks (#30382) (#30383) 2024-04-15 16:25:23 +02:00
task_list.go Use db.Find instead of writing methods for every object (#28084) 2023-11-24 03:49:41 +00:00
task_output.go Fix no ActionTaskOutput table waring (#28149) 2023-11-21 08:02:51 +00:00
task_step.go Implement actions (#21937) 2023-01-31 09:45:19 +08:00
tasks_version.go Reduce unnecessary DB queries for Actions tasks (#25199) 2023-07-24 06:11:27 +00:00
utils.go Implement actions (#21937) 2023-01-31 09:45:19 +08:00
utils_test.go Implement actions (#21937) 2023-01-31 09:45:19 +08:00
variable.go Make runs-on support variable expression (#29468) 2024-03-11 23:36:59 +07:00