forgejo/models/actions
Gusted f359ebeea5
fix(sec): web route delete runner
The web route to delete action runners did not check if the ID that was
given belonged to the context it was requested in, this made it possible
to delete every existing runner of a instance by a authenticated user.

The code was reworked to ensure that the caller of the delete
runner function retrieved the runner by ID and then checks if it belongs
to the context it was requested in, although this is not an optimal
solution it is consistent with the context checking of other code for
runners.
2025-02-08 07:21:14 +00:00
..
artifact.go Always update expiration time when creating an artifact (#32281) 2024-10-20 09:43:42 +02:00
forgejo.go feat(cli): allow updates to runners' secrets 2024-07-22 11:55:43 +02:00
forgejo_test.go Add testifylint to lint checks (#4535) 2024-07-30 19:41:10 +00:00
main_test.go fix(actions): prevent deleted records' UUID from colliding with new records (#3830) 2024-05-19 10:46:15 +00:00
run.go Detect whether action view branch was deleted (#32764) 2024-12-15 09:45:10 +01:00
run_job.go Add search action jobs for API routes, repo, org and global level (#6300) 2025-01-14 11:17:42 +00:00
run_job_list.go Add container.FilterSlice function (gitea#30339) 2024-04-16 11:49:44 +02:00
run_job_status_test.go Improve Actions status aggregations (#32860) 2024-12-22 08:46:38 +01:00
run_job_test.go Add search action jobs for API routes, repo, org and global level (#6300) 2025-01-14 11:17:42 +00:00
run_list.go Add container.FilterSlice function (gitea#30339) 2024-04-16 11:49:44 +02:00
runner.go fix(sec): web route delete runner 2025-02-08 07:21:14 +00:00
runner_list.go Refactor more filterslice (gitea#30370) 2024-04-16 11:51:00 +02:00
runner_test.go fix(sec): web route delete runner 2025-02-08 07:21:14 +00:00
runner_token.go Clarify Actions resources ownership (#31724) 2024-08-04 18:24:10 +02:00
runner_token_test.go Add testifylint to lint checks (#4535) 2024-07-30 19:41:10 +00:00
schedule.go chore: Remove ScheduleList 2025-01-31 16:22:26 +01:00
schedule_spec.go Use UTC as default timezone when schedule Actions cron tasks (#31742) 2024-08-04 18:24:10 +02:00
schedule_spec_list.go [BUG] Add early-return to loading items from SpecList 2024-07-20 01:27:11 +02:00
schedule_spec_test.go Use UTC as default timezone when schedule Actions cron tasks (#31742) 2024-08-04 18:24:10 +02:00
status.go Refactor locale&string&template related code (#29165) 2024-02-16 15:20:52 +01:00
task.go Add search action jobs for API routes, repo, org and global level (#6300) 2025-01-14 11:17:42 +00:00
task_list.go Add search action jobs for API routes, repo, org and global level (#6300) 2025-01-14 11:17:42 +00:00
task_output.go Fix no ActionTaskOutput table waring (#28149) 2023-11-21 08:02:51 +00:00
task_step.go Implement actions (#21937) 2023-01-31 09:45:19 +08:00
tasks_version.go Add codespell support and fix a good number of typos with its help (#3270) 2024-05-09 13:49:37 +00:00
utils.go Implement actions (#21937) 2023-01-31 09:45:19 +08:00
utils_test.go Implement actions (#21937) 2023-01-31 09:45:19 +08:00
variable.go Clarify Actions resources ownership (#31724) 2024-08-04 18:24:10 +02:00