MokoConsulting/MokoGitea-Fork

feat: security scanning API + pre-receive hook blocking (#692) #713

Merged

jmiller merged 3 commits from feature/secret-scanning-clean into dev

2026-06-28 08:46:04 +00:00

Author	SHA1	Message	Date
jmiller	9a4aa0fafb	fix: log error when pre-receive secret scan cannot read commit Universal: PR Check / Branch Policy (pull_request) Successful in 2s Details PR RC Release / Build RC Release (pull_request) Successful in 3s Details Universal: PR Check / Validate PR (pull_request) Failing after 9s Details Generic: Project CI / Lint & Validate (pull_request) Successful in 46s Details Universal: PR Check / Secret Scan (pull_request) Successful in 2m23s Details Universal: Auto Version Bump / Version Bump (push) Successful in 11s Details Generic: Project CI / Tests (pull_request) Has been cancelled Details Universal: PR Check / Build RC Package (pull_request) Has been cancelled Details Universal: PR Check / Report Issues (pull_request) Has been cancelled Details RC Revert / Rename rc/ back to dev/ (pull_request) Has been skipped Details Branch Cleanup / Delete merged branch (pull_request) Failing after 3s Details Previously, GetCommit failures were silently swallowed, allowing pushes to proceed without scanning. Now logs the error so admins can diagnose issues while still allowing the push. Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 02:35:50 -05:00
jmiller	84df5d7932	feat: register security scanning API routes in router PR RC Release / Build RC Release (pull_request) Successful in 3s Details Universal: PR Check / Branch Policy (pull_request) Successful in 2s Details Universal: PR Check / Validate PR (pull_request) Failing after 12s Details Generic: Project CI / Lint & Validate (pull_request) Successful in 36s Details Universal: PR Check / Secret Scan (pull_request) Successful in 1m15s Details Universal: Auto Version Bump / Version Bump (push) Successful in 11s Details Generic: Project CI / Tests (pull_request) Has been cancelled Details Universal: PR Check / Build RC Package (pull_request) Has been cancelled Details Universal: PR Check / Report Issues (pull_request) Has been cancelled Details Adds /repos/{owner}/{repo}/security/* route group for security alert management, scanning, and configuration endpoints. Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 02:33:29 -05:00
jmiller	7b334f94c0	feat: security scanning API endpoints + pre-receive hook blocking (#692 ) Universal: PR Check / Branch Policy (pull_request) Successful in 2s Details PR RC Release / Build RC Release (pull_request) Successful in 3s Details Universal: PR Check / Validate PR (pull_request) Failing after 11s Details Generic: Project CI / Lint & Validate (pull_request) Successful in 39s Details Universal: PR Check / Secret Scan (pull_request) Successful in 1m5s Details Universal: Auto Version Bump / Version Bump (push) Successful in 14s Details Generic: Project CI / Tests (pull_request) Has been cancelled Details Universal: PR Check / Build RC Package (pull_request) Has been cancelled Details Universal: PR Check / Report Issues (pull_request) Has been cancelled Details Add REST API for security alerts (list, get, update status, trigger scan) and scanner config (get, update). Wire block_on_push into the pre-receive hook so pushes containing detected secrets are rejected with details. Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 02:30:04 -05:00