forked from gitea/gitea
1
0
Fork 0
新一代DevSecOps平台,包括项目管理,代码托管,代码审查,安全扫描,CI/CD,制品库等功能,把Github搬回家。
Go to file
Niklas Goerke 8fe8ab5cbf
Mitigate Security vulnerability in the git hook feature (#13058)
* Extend git hook warning in the UI.

Git hooks are a dangerous feature, administrators should be warned before giving
the git hook privilege to users.

* Disable Git hooks by default and add warning.

Git hooks are a dangerous features (see warning text) that should only
be enabled if the administrator was informed about the risk involved.

Co-authored-by: Niklas Goerke <goerke@fzi.de>
2020-10-07 12:55:13 +03:00
.github Improve stale message (#9920) 2020-01-22 12:55:27 +02:00
assets Rework 'make generate-images' (#12316) 2020-07-26 17:47:51 +08:00
build update revive lint to latest commit (#12921) 2020-09-22 20:02:16 +03:00
cmd Refactor use TrimSuffix instead of TrimRight (#12993) 2020-10-01 06:54:34 +01:00
contrib Removing k8s contrib file (#12761) 2020-09-07 23:22:55 -04:00
custom/conf Mitigate Security vulnerability in the git hook feature (#13058) 2020-10-07 12:55:13 +03:00
docker Fix typo in README.md (#12369) 2020-07-29 09:29:51 -05:00
docs Mitigate Security vulnerability in the git hook feature (#13058) 2020-10-07 12:55:13 +03:00
integrations Attachments: Add extension support, allow all types for releases (#12465) 2020-10-05 01:49:33 -04:00
models (Re)Load issue labels when changing them (#13007) 2020-10-05 09:49:11 +03:00
modules Attachments: Add extension support, allow all types for releases (#12465) 2020-10-05 01:49:33 -04:00
options Mitigate Security vulnerability in the git hook feature (#13058) 2020-10-07 12:55:13 +03:00
public Add a migrate service type switch page (#12697) 2020-09-09 14:29:10 -04:00
routers fix: case typo (#13049) 2020-10-06 12:16:16 -04:00
services Fix error create comment on outdated file (#13041) 2020-10-05 20:18:55 -04:00
snap Add logic to build stable and edge builds (#12052) 2020-07-17 13:27:00 -04:00
templates fix: case typo (#13049) 2020-10-06 12:16:16 -04:00
tools Add 'make watch' (#12636) 2020-09-04 20:55:06 -04:00
vendor hCaptcha Support (#12594) 2020-10-02 23:37:53 -04:00
web_src Adding visual cue for "Limited" & "Private" organizations. (#13040) 2020-10-06 02:25:43 -04:00
.air.conf Add 'watch-backend' (#12330) 2020-07-27 14:05:42 -04:00
.changelog.yml Changelog 1.11.0 (#10204) (#10211) 2020-02-10 11:16:31 -05:00
.drone.yml Bump min required golang to 1.13 (#12717) 2020-09-04 14:12:01 -04:00
.editorconfig Reindent Less to 2-space (#12602) 2020-08-25 22:48:53 +03:00
.eslintrc Update JS dependencies (#12702) 2020-09-04 00:26:50 +03:00
.gitattributes Update vendored .gitattributes (#12322) 2020-07-27 00:17:01 -04:00
.gitignore Move jquery-minicolors to npm/webpack (#12305) 2020-07-29 14:44:23 -04:00
.golangci.yml Add default storage configurations (#12813) 2020-09-29 12:05:13 +03:00
.ignore Fonts rework (#12114) 2020-07-06 11:56:54 +03:00
.lgtm refactor: ignore LGTM from author of pull request. (#3283) 2018-01-02 06:13:49 -06:00
.npmrc add package-lock=true in .npmrc (#9736) 2020-01-13 00:11:43 +01:00
.revive.toml refactor: replace lint to revive (#5422) 2018-12-03 09:28:46 -05:00
.stylelintrc File header tweaks, add CSS helpers (#12635) 2020-09-08 13:17:56 -04:00
BSDmakefile Add BSDmakefile to prevent errors when `make` is called under FreeBSD (#4446) 2018-07-16 20:45:51 +02:00
CHANGELOG.md Changelog 1.12.5 (#13002) (#13003) 2020-10-01 14:47:54 -04:00
CONTRIBUTING.md Add link to owners election tickets, reorder to most-recent first (#11632) 2020-05-26 16:11:26 -05:00
DCO follow the advisor: add DCO and some improvements 2016-11-04 16:43:41 +08:00
Dockerfile Update Dockerfile (#12922) 2020-09-27 18:52:22 -04:00
LICENSE Fix typo 2016-11-08 08:42:05 +01:00
MAINTAINERS Add myself to MAINTAINERS (#11494) 2020-05-18 16:50:22 -05:00
Makefile Add migration for password algorithm change (#12784) 2020-09-15 18:02:41 -04:00
README.md fix readme format (#12797) 2020-09-10 13:05:15 -04:00
README_ZH.md update discord link (#10455) 2020-02-25 12:36:45 -05:00
SECURITY.md Add security policy to repo (#12536) 2020-08-19 17:15:55 +01:00
build.go update revive lint to latest commit (#12921) 2020-09-22 20:02:16 +03:00
go.mod hCaptcha Support (#12594) 2020-10-02 23:37:53 -04:00
go.sum hCaptcha Support (#12594) 2020-10-02 23:37:53 -04:00
main.go Add a storage layer for attachments (#11387) 2020-08-18 12:23:45 +08:00
package-lock.json Update JS dependencies (#12782) 2020-09-10 12:16:40 +08:00
package.json Update JS dependencies (#12782) 2020-09-10 12:16:40 +08:00
semantic.json Update JS dependencies (#12782) 2020-09-10 12:16:40 +08:00
webpack.config.js Update JS dependencies (#12782) 2020-09-10 12:16:40 +08:00

README.md

简体中文

logo Gitea - Git with a cup of tea

Build Status Join the Discord chat at https://discord.gg/Gitea codecov Go Report Card GoDoc GitHub release Help Contribute to Open Source Become a backer/sponsor of gitea License: MIT Crowdin TODOs

Purpose

The goal of this project is to make the easiest, fastest, and most painless way of setting up a self-hosted Git service. Using Go, this can be done with an independent binary distribution across all platforms which Go supports, including Linux, macOS, and Windows on x86, amd64, ARM and PowerPC architectures. Want to try it before doing anything else? Do it with the online demo! This project has been forked from Gogs since 2016.11 but changed a lot.

Building

From the root of the source tree, run:

TAGS="bindata" make build

or if sqlite support is required:

TAGS="bindata sqlite sqlite_unlock_notify" make build

The build target is split into two sub-targets:

  • make backend which requires Go 1.13 or greater.
  • make frontend which requires Node.js 10.13 or greater.

If pre-built frontend files are present it is possible to only build the backend:

TAGS="bindata" make backend

Parallelism is not supported for these targets, so please don't include -j <num>.

More info: https://docs.gitea.io/en-us/install-from-source/

Using

./gitea web

NOTE: If you're interested in using our APIs, we have experimental support with documentation.

Contributing

Expected workflow is: Fork -> Patch -> Push -> Pull Request

NOTES:

  1. YOU MUST READ THE CONTRIBUTORS GUIDE BEFORE STARTING TO WORK ON A PULL REQUEST.
  2. If you have found a vulnerability in the project, please write privately to security@gitea.io. Thanks!

Further information

For more information and instructions about how to install Gitea, please look at our documentation. If you have questions that are not covered by the documentation, you can get in contact with us on our Discord server, or forum!

Authors

Backers

Thank you to all our backers! 🙏 [Become a backer]

Sponsors

Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]

FAQ

How do you pronounce Gitea?

Gitea is pronounced /ɡɪti:/ as in "gi-tea" with a hard g.

Why is this not hosted on a Gitea instance?

We're working on it.

License

This project is licensed under the MIT License. See the LICENSE file for the full license text.

Screenshots

Looking for an overview of the interface? Check it out!

Dashboard User Profile Global Issues
Branches Web Editor Activity
New Migration Migrating Pull Request View
Pull Request Dark Diff Review Dark Diff Dark