0
0
mirror of https://github.com/go-gitea/gitea.git synced 2024-11-30 05:50:50 +01:00
Go to file
zeripath 4979f15c3f
Add configurable Trust Models (#11712)
* Add configurable Trust Models

Gitea's default signature verification model differs from GitHub. GitHub
uses signatures to verify that the committer is who they say they are -
meaning that when GitHub makes a signed commit it must be the committer.
The GitHub model prevents re-publishing of commits after revocation of a
key and prevents re-signing of other people's commits to create a
completely trusted repository signed by one key or a set of trusted
keys.

The default behaviour of Gitea in contrast is to always display the
avatar and information related to a signature. This allows signatures to
be decoupled from the committer. That being said, allowing arbitary
users to present other peoples commits as theirs is not necessarily
desired therefore we have a trust model whereby signatures from
collaborators are marked trusted, signatures matching the commit line
are marked untrusted and signatures that match a user in the db but not
the committer line are marked unmatched.

The problem with this model is that this conflicts with Github therefore
we need to provide an option to allow users to choose the Github model
should they wish to.

Signed-off-by: Andrew Thornton <art27@cantab.net>

* Adjust locale strings

Signed-off-by: Andrew Thornton <art27@cantab.net>

* as per @6543

Co-authored-by: 6543 <6543@obermui.de>

* Update models/gpg_key.go

* Add migration for repository

Signed-off-by: Andrew Thornton <art27@cantab.net>

Co-authored-by: 6543 <6543@obermui.de>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2020-09-20 00:44:55 +08:00
.github
assets
build Add github api token option to generate-license & generate-gitignore (#12700) 2020-09-04 10:02:37 -04:00
cmd Check passwords against HaveIBeenPwned (#12716) 2020-09-08 17:06:39 -05:00
contrib Removing k8s contrib file (#12761) 2020-09-07 23:22:55 -04:00
custom/conf Add configurable Trust Models (#11712) 2020-09-20 00:44:55 +08:00
docker
docs Add configurable Trust Models (#11712) 2020-09-20 00:44:55 +08:00
integrations Refactor: move Commit To APIFormat Code & Lot of StopWatch related things (#12729) 2020-09-18 20:09:26 +08:00
models Add configurable Trust Models (#11712) 2020-09-20 00:44:55 +08:00
modules Add configurable Trust Models (#11712) 2020-09-20 00:44:55 +08:00
options Add configurable Trust Models (#11712) 2020-09-20 00:44:55 +08:00
public Add a migrate service type switch page (#12697) 2020-09-09 14:29:10 -04:00
routers Add configurable Trust Models (#11712) 2020-09-20 00:44:55 +08:00
services Add configurable Trust Models (#11712) 2020-09-20 00:44:55 +08:00
snap
templates Add configurable Trust Models (#11712) 2020-09-20 00:44:55 +08:00
tools Add 'make watch' (#12636) 2020-09-04 20:55:06 -04:00
vendor Switch to absolute latest pq driver (#12859) 2020-09-18 17:38:46 +03:00
web_src Fix line selection on blame view (#12857) 2020-09-15 16:43:05 -04:00
.air.conf
.changelog.yml
.drone.yml Bump min required golang to 1.13 (#12717) 2020-09-04 14:12:01 -04:00
.editorconfig Reindent Less to 2-space (#12602) 2020-08-25 22:48:53 +03:00
.eslintrc Update JS dependencies (#12702) 2020-09-04 00:26:50 +03:00
.gitattributes
.gitignore
.golangci.yml
.ignore
.lgtm
.npmrc
.revive.toml
.stylelintrc File header tweaks, add CSS helpers (#12635) 2020-09-08 13:17:56 -04:00
BSDmakefile
build.go
CHANGELOG.md Changelog for 1.12.4 release (#12687) (#12709) 2020-09-03 23:44:34 -04:00
CONTRIBUTING.md
DCO
Dockerfile
go.mod Switch to absolute latest pq driver (#12859) 2020-09-18 17:38:46 +03:00
go.sum Switch to absolute latest pq driver (#12859) 2020-09-18 17:38:46 +03:00
LICENSE
main.go Add a storage layer for attachments (#11387) 2020-08-18 12:23:45 +08:00
MAINTAINERS
Makefile Add migration for password algorithm change (#12784) 2020-09-15 18:02:41 -04:00
package-lock.json Update JS dependencies (#12782) 2020-09-10 12:16:40 +08:00
package.json Update JS dependencies (#12782) 2020-09-10 12:16:40 +08:00
README_ZH.md
README.md fix readme format (#12797) 2020-09-10 13:05:15 -04:00
SECURITY.md Add security policy to repo (#12536) 2020-08-19 17:15:55 +01:00
semantic.json Update JS dependencies (#12782) 2020-09-10 12:16:40 +08:00
webpack.config.js Update JS dependencies (#12782) 2020-09-10 12:16:40 +08:00

简体中文

logo Gitea - Git with a cup of tea

Build Status Join the Discord chat at https://discord.gg/Gitea codecov Go Report Card GoDoc GitHub release Help Contribute to Open Source Become a backer/sponsor of gitea License: MIT Crowdin TODOs

Purpose

The goal of this project is to make the easiest, fastest, and most painless way of setting up a self-hosted Git service. Using Go, this can be done with an independent binary distribution across all platforms which Go supports, including Linux, macOS, and Windows on x86, amd64, ARM and PowerPC architectures. Want to try it before doing anything else? Do it with the online demo! This project has been forked from Gogs since 2016.11 but changed a lot.

Building

From the root of the source tree, run:

TAGS="bindata" make build

or if sqlite support is required:

TAGS="bindata sqlite sqlite_unlock_notify" make build

The build target is split into two sub-targets:

  • make backend which requires Go 1.13 or greater.
  • make frontend which requires Node.js 10.13 or greater.

If pre-built frontend files are present it is possible to only build the backend:

TAGS="bindata" make backend

Parallelism is not supported for these targets, so please don't include -j <num>.

More info: https://docs.gitea.io/en-us/install-from-source/

Using

./gitea web

NOTE: If you're interested in using our APIs, we have experimental support with documentation.

Contributing

Expected workflow is: Fork -> Patch -> Push -> Pull Request

NOTES:

  1. YOU MUST READ THE CONTRIBUTORS GUIDE BEFORE STARTING TO WORK ON A PULL REQUEST.
  2. If you have found a vulnerability in the project, please write privately to security@gitea.io. Thanks!

Further information

For more information and instructions about how to install Gitea, please look at our documentation. If you have questions that are not covered by the documentation, you can get in contact with us on our Discord server, or forum!

Authors

Backers

Thank you to all our backers! 🙏 [Become a backer]

Sponsors

Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]

FAQ

How do you pronounce Gitea?

Gitea is pronounced /ɡɪti:/ as in "gi-tea" with a hard g.

Why is this not hosted on a Gitea instance?

We're working on it.

License

This project is licensed under the MIT License. See the LICENSE file for the full license text.

Screenshots

Looking for an overview of the interface? Check it out!

Dashboard User Profile Global Issues
Branches Web Editor Activity
New Migration Migrating Pull Request View
Pull Request Dark Diff Review Dark Diff Dark