forgejo/modules
Earl Warren 73bd2e922a [v11.0/forgejo] fix: use credentials helpers for git clones (#9069)
**Backport**: https://codeberg.org/forgejo/forgejo/pulls/9067

When performing a `git clone` that requires credentials, they are temporarily stored in files and used with [Git credential](https://git-scm.com/docs/gitcredentials/2.50.0#_requesting_credentials). They were previously included in the URL that were readable by a user with shell access to the host running the Forgejo instance when, for instance, they ask for the list of process (`ps`).

Co-authored-by: Gusted <postmaster@gusted.xyz>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9069
Reviewed-by: 0ko <0ko@noreply.codeberg.org>
2025-08-30 18:57:49 +02:00
..
actions [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
activitypub [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
analyze
assetfs [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
auth [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
avatar [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
base [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
cache [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
card [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
charset [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
container chore: teach set module about iter.Seq (#6676) 2025-01-24 16:45:46 +00:00
csv [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
emoji
eventsource [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
forgefed [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
generate [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
git [v11.0/forgejo] fix: use credentials helpers for git clones (#9069) 2025-08-30 18:57:49 +02:00
gitrepo [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
graceful [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
hcaptcha [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
highlight [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
hostmatcher
html
httpcache [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
httplib [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
indexer [v11.0/forgejo] storage test: reader should not be closed on save (#9031) 2025-08-26 10:20:00 +02:00
issue/template [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
json
keying [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
label [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
lfs [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
locale feat(build): linter for missing msgid definitions (#7109) 2025-03-14 15:50:30 +00:00
log [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
markup [v11.0/forgejo] fix(ui): add missing lazy load attribute to images (#8246) (#8283) 2025-06-26 01:02:41 +02:00
mcaptcha [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
metrics [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
migration [v11.0/forgejo] fix(migrations): transfer PR flow information (#7437) 2025-04-03 07:35:20 +00:00
nosql [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
optional [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
options [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
packages [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
paginator
pprof [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
private [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
process Drop SSPI auth support and more Windows files (#7148) 2025-03-08 00:43:41 +00:00
proxy [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
proxyprotocol [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
public [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
queue [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
recaptcha [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
references [v11.0/forgejo] fix: pull request cross references (#7983) 2025-05-28 18:25:40 +02:00
regexplru [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
repository [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
secret Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v1.64.6 (forgejo) (#7118) 2025-03-04 21:38:35 +00:00
session [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
setting [v11.0/forgejo] fix(UI): i18n: improve naming (#7542) 2025-04-15 06:24:49 +00:00
sitemap
ssh [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
storage [v11.0/forgejo] storage test: reader should not be closed on save (#9031) 2025-08-26 10:20:00 +02:00
structs [v11.0/forgejo] Revert "fix(api): document is_system_webhook field (#7784)" (#8287) 2025-06-26 01:38:51 +02:00
svg [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
sync [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
system [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
templates [v11.0/forgejo] fix(ui): add missing lazy load attribute to images (#8246) (#8283) 2025-06-26 01:02:41 +02:00
test [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
testlogger [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
timeutil [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
translation [v11.0/forgejo] fix(i18n): prevent incorrect logging on strings missing in JSON locales (#7599) 2025-04-23 13:44:16 +00:00
turnstile [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
typesniffer [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
updatechecker [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
uri
user Drop SSPI auth support and more Windows files (#7148) 2025-03-08 00:43:41 +00:00
util [v11.0/forgejo] fix: use credentials helpers for git clones (#9069) 2025-08-30 18:57:49 +02:00
validation [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
web [v11.0/forgejo] feat: make Forgejo Actions server logs less noisy (#7991) 2025-05-29 17:24:15 +02:00
webhook
zstd