runner/act
Roman K. 073b650dd0 feat: add secure token handling for reusable workflows
- Add host fallback to use GitHubInstance config when 'uses' has no host
- Implement same-instance check to prevent token leakage to external hosts
- Fix CloneURL() to properly handle trailing slashes in base URLs
- Add isSameInstance() helper to normalize and compare instance URLs
- Update tests to use FORGEJO_ACTIONS_TOKEN and add same-instance tests
2025-10-08 13:43:56 +02:00
..
artifactcache fix: allow GC & cache operations to operate concurrently (#1040) 2025-09-30 19:12:45 +00:00
cacheproxy fix: Correctly override the value of Forgejo-Cache-Host when ACTIONS_CACHE_URL is overridden. (#1027) 2025-09-26 07:02:45 +00:00
common chore: bump version to v11 (#940) 2025-09-05 07:29:38 +00:00
container fix: remove LXC working directory when it completes (#1003) 2025-09-16 19:42:04 +00:00
exprparser feat: the forgejo context is equivalent to the github context (#999) 2025-09-15 09:14:11 +00:00
filecollector chore: modernize code (#857) 2025-08-15 04:54:13 +00:00
jobparser feat: support evaluating workflow-level concurrency blocks in jobparser (#1026) 2025-09-27 04:37:36 +00:00
lookpath chore: use the same .golangci.yml as the runner & gofumpt over gofmt (#206) 2025-07-28 12:26:41 +00:00
model chore: bump version to v11 (#940) 2025-09-05 07:29:38 +00:00
runner feat: add secure token handling for reusable workflows 2025-10-08 13:43:56 +02:00
schema chore: test: exercise contexts in matrix when validating workflows (#1033) 2025-09-28 07:15:51 +00:00
workflowpattern chore: modernize code (#857) 2025-08-15 04:54:13 +00:00