finn/forgejo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
forgejo/options/locale
History
Jason Song edf98a2dc3
Require approval to run actions for fork pull request (#22803) 
Currently, Gitea will run actions automatically which are triggered by
fork pull request. It's a security risk, people can create a PR and
modify the workflow yamls to execute a malicious script.

So we should require approval for first-time contributors, which is the
default strategy of a public repo on GitHub, see [Approving workflow
runs from public
forks](https://docs.github.com/en/actions/managing-workflow-runs/approving-workflow-runs-from-public-forks).

Current strategy:

- don't need approval if it's not a fork PR;
- always need approval if the user is restricted;
- don't need approval if the user can write;
- don't need approval if the user has been approved before;
- otherwise, need approval.

https://user-images.githubusercontent.com/9418365/217207121-badf50a8-826c-4425-bef1-d82d1979bc81.mov

GitHub has an option for that, you can see that at
`/<owner>/<repo>/settings/actions`, and we can support that later.

<img width="835" alt="image"
src="https://user-images.githubusercontent.com/9418365/217199990-2967e68b-e693-4e59-8186-ab33a1314a16.png">

---------

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2023-02-24 15:58:49 +08:00
..
locale_bg-BG.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_cs-CZ.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_de-DE.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_el-GR.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_en-US.ini Require approval to run actions for fork pull request (#22803) 2023-02-24 15:58:49 +08:00
locale_es-ES.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_fa-IR.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_fi-FI.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_fr-FR.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_hu-HU.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_id-ID.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_is-IS.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_it-IT.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_ja-JP.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_ko-KR.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_lv-LV.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_ml-IN.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_nl-NL.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_pl-PL.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_pt-BR.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_pt-PT.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_ru-RU.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_si-LK.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_sk-SK.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_sv-SE.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_tr-TR.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_uk-UA.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_zh-CN.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_zh-HK.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
locale_zh-TW.ini Revert "[skip ci] Updated translations via Crowdin" (#21689) 2022-11-06 11:29:52 +08:00
TRANSLATORS Fix missing left and right carets in TRANSLATORS (#21397) 2022-10-10 10:36:37 -04:00