No description

Clojure 73.1%
Python 25.9%
Dockerfile 1%

Find a file

Michael Jerger 0d09f2dce7 fix test		2026-07-08 13:28:38 +02:00
infrastructure/report	bump version to: 0.12.2-SNAPSHOT	2026-07-08 11:00:29 +02:00
report	elaborate verification	2026-06-26 16:47:42 +02:00
src	rename out of order activity	2026-07-08 10:59:39 +02:00
.gitignore	refactor name	2026-06-26 15:40:04 +02:00
.gitlab-ci.yml	fix the ci	2026-06-23 15:35:41 +02:00
build.py	add prepared image	2026-06-23 15:15:02 +02:00
forgejo-attacks.yaml	fix test	2026-07-08 13:28:38 +02:00
forgejo-definition.yaml	fix test	2026-07-08 13:28:38 +02:00
project.clj	bump version to: 0.12.2-SNAPSHOT	2026-07-08 11:00:29 +02:00
README.md	update readme	2026-06-18 18:19:52 +02:00

README.md

forgejo-tara

DeltaChat chat over e-mail | meissa@social.meissa-gmbh.de | Blog | Website

Install

curl -LO https://repo.prod.meissa.de/meissa/forgejo-tara/releases/download/0.9.0/forgejo-tara
sudo install --mode=755 forgejo-tara /usr/local/bin/

Tara for Federation in Forgejo

forgejo-tara forgejo-definition.yaml forgejo-attacks.yaml

podman run -v ./report:/documents \
    domaindrivenarchitecture/asciidoctor-mermaid -r asciidoctor-pdf -b pdf report.adoc

Input

Definitions to model the system under analysis & the attack vectors:

The Forgejo system model: forgejo-definition.yaml
The attack vectors analyzed: forgejo-attacks.yaml

Code

To link attack-vectors to the system definition we need some small piece of code:

rule-code

Report generated

Pls. find the report generated at: report/report.pdf

Common Knowledge

This is tool is based on and uses common knowledge from https://repo.prod.meissa.de/meissa/dda-tara

Development & mirrors

Development happens at: https://repo.prod.meissa.de/meissa/forgejo-tara

Mirrors are:

https://codeberg.org/meissa/forgejo-tara (Issues and PR)
https://gitlab.com/domaindrivenarchitecture/forgejo-tara (CI)

For more details about our repository model see: https://repo.prod.meissa.de/meissa/federate-your-repos