Antoine Martin
7e3c8b8f28
lohr: validate webhook signature
...
Previously lohr was unusable in a production setting, anyone could forge
a malicious webhook and either:
- mirror a private repo of yours to another remote they own
- wipe a repo of yours by forcing mirroring from an empty mirror
This is no longer the case!
2021-03-30 11:33:42 +02:00
Antoine Martin
3ccf08f5bd
job: remove redundant repo name from log
2021-03-29 20:54:19 +02:00
Bruno BELANYI
295a28bab4
lohr: add default and additional remotes
...
Co-authored-by: Antoine Martin <antoine@alarsyo.net>
2021-03-29 20:52:04 +02:00
Antoine Martin
7c21d65920
job: log success when finished
2021-03-29 20:11:37 +02:00
Antoine Martin
a3fbef6fc6
main: add TODO
2021-03-29 18:12:06 +02:00
Antoine Martin
ae3ab8c893
job: remove debug print
2021-03-29 17:45:25 +02:00
Antoine Martin
f13d8e142e
job: read remotes list from repository
2021-03-29 17:21:55 +02:00
Antoine Martin
2bd817099f
first working POC
2021-03-29 17:10:53 +02:00
Antoine Martin
b37891af49
setup basic app
2021-03-29 02:01:53 +02:00
Antoine Martin
2cb5dbd22c
Initial commit
2021-03-27 10:42:49 +01:00
Antoine Martin
Bruno BELANYI