MokoConsulting/MokoGitea-Fork

feat: security scanning API + pre-receive hook blocking (#692) #711

Closed

jmiller wants to merge 4 commits from feature/secret-scanning into dev

Author	SHA1	Message	Date
jmiller	240fe1ebe5	feat: security scanning API endpoints + pre-receive hook blocking (#692 ) PR RC Release / Build RC Release (pull_request) Successful in 2s Details Generic: Project CI / Lint & Validate (pull_request) Successful in 37s Details Universal: PR Check / Branch Policy (pull_request) Successful in 1s Details Branch Cleanup / Delete merged branch (pull_request) Has been skipped Details RC Revert / Rename rc/ back to dev/ (pull_request) Has been skipped Details Universal: PR Check / Validate PR (pull_request) Failing after 9s Details Universal: PR Check / Secret Scan (pull_request) Successful in 50s Details Universal: Auto Version Bump / Version Bump (push) Successful in 14s Details Generic: Project CI / Tests (pull_request) Has been cancelled Details Universal: PR Check / Build RC Package (pull_request) Has been cancelled Details Universal: PR Check / Report Issues (pull_request) Has been cancelled Details Add REST API for security alerts (list, get, update status, trigger scan) and scanner config (get, update). Wire block_on_push into the pre-receive hook so pushes containing detected secrets are rejected with details. Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 02:14:46 -05:00
jmiller	ecc1f20162	feat: cascade merge — auto-create PRs to downstream branches after merge (#460 ) Adds configurable cascade rules per repo. When a PR merges into a source branch, the system auto-creates PRs to each configured target branch. Skips if a matching PR already exists. - Model: CascadeMergeRule (repo_id, source, target, enabled, auto_merge) - Migration v362 creates cascade_merge_rule table - Notifier hooks into MergePullRequest/AutoMergePullRequest events - API: CRUD at /repos/{owner}/{repo}/cascade_rules (admin only) Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 02:04:40 -05:00
jmiller	965abb54b8	feat: add issue status presets and cross-org migration (#507 ) 4 built-in presets: default, software-development, support-tickets, bug-tracking. API endpoints to list presets, apply to org, and copy statuses between orgs. Web UI dropdown on org settings page. Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 02:03:15 -05:00
jmiller	b94f41b597	feat(orgs): auto-create default teams on org creation (#513 ) New organizations now get three default teams in addition to Owners: - Developers (write: code, issues, PRs, wiki, projects; read: releases) - Reviewers (read: code, issues, PRs, releases, wiki) - CI/CD (write: actions, packages, releases; read: code) Teams are defined in DefaultOrgTeams and created inside the same transaction as the org, so creation is atomic. Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 02:00:17 -05:00