Commit graph

11 commits

Author SHA1 Message Date
Antoine Martin fea9d61d2b signature: fix unused trait warning 2021-03-30 11:41:16 +02:00
Antoine Martin 7e3c8b8f28 lohr: validate webhook signature
Previously lohr was unusable in a production setting, anyone could forge
a malicious webhook and either:

- mirror a private repo of yours to another remote they own
- wipe a repo of yours by forcing mirroring from an empty mirror

This is no longer the case!
2021-03-30 11:33:42 +02:00
Antoine Martin 3ccf08f5bd job: remove redundant repo name from log 2021-03-29 20:54:19 +02:00
Bruno BELANYI 295a28bab4 lohr: add default and additional remotes
Co-authored-by: Antoine Martin <antoine@alarsyo.net>
2021-03-29 20:52:04 +02:00
Antoine Martin 7c21d65920 job: log success when finished 2021-03-29 20:11:37 +02:00
Antoine Martin a3fbef6fc6 main: add TODO 2021-03-29 18:12:06 +02:00
Antoine Martin ae3ab8c893 job: remove debug print 2021-03-29 17:45:25 +02:00
Antoine Martin f13d8e142e job: read remotes list from repository 2021-03-29 17:21:55 +02:00
Antoine Martin 2bd817099f first working POC 2021-03-29 17:10:53 +02:00
Antoine Martin b37891af49 setup basic app 2021-03-29 02:01:53 +02:00
Antoine Martin 2cb5dbd22c Initial commit 2021-03-27 10:42:49 +01:00