You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
forgejo/modules/repofiles
zeripath 4979f15c3f
Add configurable Trust Models (#11712)
* Add configurable Trust Models

Gitea's default signature verification model differs from GitHub. GitHub
uses signatures to verify that the committer is who they say they are -
meaning that when GitHub makes a signed commit it must be the committer.
The GitHub model prevents re-publishing of commits after revocation of a
key and prevents re-signing of other people's commits to create a
completely trusted repository signed by one key or a set of trusted
keys.

The default behaviour of Gitea in contrast is to always display the
avatar and information related to a signature. This allows signatures to
be decoupled from the committer. That being said, allowing arbitary
users to present other peoples commits as theirs is not necessarily
desired therefore we have a trust model whereby signatures from
collaborators are marked trusted, signatures matching the commit line
are marked untrusted and signatures that match a user in the db but not
the committer line are marked unmatched.

The problem with this model is that this conflicts with Github therefore
we need to provide an option to allow users to choose the Github model
should they wish to.

Signed-off-by: Andrew Thornton <art27@cantab.net>

* Adjust locale strings

Signed-off-by: Andrew Thornton <art27@cantab.net>

* as per @6543

Co-authored-by: 6543 <6543@obermui.de>

* Update models/gpg_key.go

* Add migration for repository

Signed-off-by: Andrew Thornton <art27@cantab.net>

Co-authored-by: 6543 <6543@obermui.de>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
4 years ago
..
action.go Move all push update operations to a queue (#10133) 4 years ago
action_test.go Move all push update operations to a queue (#10133) 4 years ago
blob.go Add Close() method to gogitRepository (#8901) 5 years ago
blob_test.go prefer NoError/Error over Nil/NotNil (#12271) 4 years ago
commit.go Number of commits ahead/behind in branch overview (#6695) 5 years ago
commit_status.go Add Close() method to gogitRepository (#8901) 5 years ago
content.go Fix GetContents(): Dont't ignore Executables (#11192) 4 years ago
content_test.go prefer NoError/Error over Nil/NotNil (#12271) 4 years ago
delete.go Add configurable Trust Models (#11712) 4 years ago
diff.go Move git diff codes from models to services/gitdiff (#7889) 5 years ago
diff_test.go prefer NoError/Error over Nil/NotNil (#12271) 4 years ago
file.go File Edit: Author/Committer interchanged [BugFix] (#9297) 5 years ago
file_test.go prefer NoError/Error over Nil/NotNil (#12271) 4 years ago
repofiles.go Fixes 4762 - Content API for Creating, Updating, Deleting Files (#6314) 5 years ago
repofiles_test.go Fixes 4762 - Content API for Creating, Updating, Deleting Files (#6314) 5 years ago
temp_repo.go Add configurable Trust Models (#11712) 4 years ago
tree.go fixed bug in GitTreeBySHA where pulling items from a page other than page 1 would fail because the wrong var was used to set the entries to return (#9459) 5 years ago
tree_test.go prefer NoError/Error over Nil/NotNil (#12271) 4 years ago
update.go Add configurable Trust Models (#11712) 4 years ago
upload.go LFS support to be stored on minio (#12518) 4 years ago
verification.go Sign merges, CRUD, Wiki and Repository initialisation with gpg key (#7631) 5 years ago