core
Monorepo for Tangled forked from tangled.org/core
Star
Fork
Watch

Commits on master
nix: add crates/ to rustSrc
committed
gitutil,appview,knot{server,mirror}: serve archives standardized
committed
lexicons/repo: allow null secrets response
committed
knot2/server,Containerfile: run key-fill & take its budget from config
committed
knot2/keyfill: fill index w/ published keys off auth path
committed
knot2/ssh: verify login name client asserts against published keys
committed
knot2/index: test key set's leases, budget, sweep, work planning
committed
knot2/index: watch account's published keys with lease & budget
committed
knot2/atproto: cache claimed pubkeys & read missing did as gone
committed
knot2/resource,fixtures: pace repeation lookups, turn off git auto-maintenance
committed
spindle/engines/microvm: make cgroups tests compile on non-linux
committed
knot2/idxwrite,shuttle/exec,.tangled: fix rust CI test fails
committed
bobbin,knotmirror: read git thru mirror before knot
committed
bobbin/crates/knot-proxy: add mirror client & git NSID routes
committed
gitutil,knotmirror/xrpc: match tree/branch responses that knot serves
committed
knotmirror/xrpc/gitea: read tree blob sizes from cat-file batch
committed
knot2/resource: warn when one address takes most pre-auth refusals
committed
bobbin/xrpc: forward client address that knot can rate-limit on
committed
knot2/xrpc: read forwarded chain past every listed proxy
committed
crates/trusted-proxies: shared proxy allowlist w/ CIDR & chain travarsal
committed
.tangled: add commit message lint (git hook & ci)
committed
.tangled/workflows: run rust checks and tests
committed
ogre: pluralize files changed count in PR og image
committed
lexicons/repo: allow null languages response
committed
ogre: pluralize metrics
committed
bobbin/resolver: set blobs on legacy issue & pull upgrades
committed
bobbin/xrpc: forward X-Forwarded-For headers to knots
committed
bobbin: install rustls crypto provider explicitly
committed
knot2: create fork pull request links on push
committed
cmd/zoekt-tngl-indexserver: validate branch names & object ids before running git
committed
cmd/prefill-zoekt,zoekt-tngl-indexserver: type repoDIDs & knot URLs via repoident
committed
repoverify,idresolver/mock: extract Describe, resolve knots via KnotURL
committed
repoident: add KnotURL newtype which parses & canonicalizes knot endpoints
committed
docs: fix dark mode on docsite
committed
nix: fix docs builds
committed
knot2/xrpc: honor forwarded-header only from `xrpc.trusted_proxies`
committed
tinybuttercom
docs: use tangled.org (not .sh) for settings link in knot setup
committed
knot2/git: isolate repo open so ambient config can't inject archive filter driver
committed
spindle/models: fix secret masker cutting off lines early
committed
knot2/README.md: remove 'possibility' of upstream. it's happened
committed
knot2/xrpc: tolerate old owner-name file remote
committed
knot2/index: resolve clone path by display name when no rkey
committed
appview/pages: pass resolver instead of nil in tests
committed
spindle/models: hold back a trailing window so secrets split across log writes stay masked
committed
spindle/microvm: bind qmp sockets ourselves at 0600 and pass qemu the fd
committed
spindle/microvm: cap each workflow vm's cpu and io in its cgroup
committed
spindle/microvm: key the activation config cache per repo so tenants can't poison each other's toplevels
committed
spindle/netguard: refuse to dial internal addresses on user-controlled fetches
committed
knot2/ssh: force no compression bc makes no sense
committed
appview/pages/markup: render attached images
committed
appview: upload images as blobs (pulls)
committed
appview: upload images as blobs (issues)
committed
appview/pages/templates: rename blob field name
committed
lexicons: add blobs field to `repo.{issue,pull}`
committed
knot2/xrpc: hidden staging ref read
committed
spindle: fix skipped tests not actually being skipped
committed
knot2/xrpc: forks take upstream's object format
committed
nix: package knot-server and knot-migrate, add a nixos module
committed
appview/{config,state}: gate xrpc router behind TANGLED_XRPC_ENABLED
committed
appview/xrpc: handlers for "private" xrpc service
committed