jmiller
56e65268d7
Org-level branch protection rules previously supported team-only allowlists. This adds per-user allowlists (resolved by username OR email) and "allow the actions bot" toggles for the push, merge and force-push allowlists, plus a per-user approvals allowlist -- mirroring the repo-level ProtectedBranch fields exactly. These carry through ToProtectedBranch() into the standard enforcement path. Model: add WhitelistUserIDs/MergeWhitelistUserIDs/ ForcePushAllowlistUserIDs/ApprovalsWhitelistUserIDs ([]int64 JSON) and WhitelistActionsUser/MergeWhitelistActionsUser/ ForcePushAllowlistActionsUser (bool) to OrgProtectedBranch, and copy them in ToProtectedBranch(). Migration 362 (v368-style file v363.go): additive columns via x.Sync. API: new resolveUserIDs helper (username-then-email lookup, dedupe, 422 on unknown); Create/Edit set the new fields gated on the matching Enable* flags; GET resolves stored user IDs back to usernames and returns the actions-user bools. DTOs: add *Usernames []string + *ActionsUser bool to the Create/Edit/ response structs, using the same json names as repo_branch.go. Swagger: register OrgBranchProtection(/List) responses and the Create/Edit option bodies; regenerate specs for the org endpoints. Delete allowlists are intentionally omitted -- org branch protection has no delete-allowlist concept (no CanDelete/EnableDeleteAllowlist/ DeleteAllowlistTeamIDs), so there is no team allowlist to extend. Claude-Session: https://claude.ai/code/session_01Wsno14cxE49MstXFs9G5KT
MokoGitea
Custom Gitea fork with enhanced wiki system, DLID licensing, issue statuses, cascade merge, security scanning, org metadata, CI standardization, and project board API.
Key Features
- Wiki System -- wikilinks, categories, backlinks, template transclusion, revision diffs, rename redirects, folder ACL, enhanced ToC, print view, ZIP export (details)
- DLID Licensing -- license management, entitlements, domain activations, ed25519-signed downloads
- API Token Scope Editing -- edit token scopes via API (PATCH) or web UI after creation
- Issue Statuses -- custom workflow statuses per org with required baseline protection, presets, cross-org migration
- Cascade Merge -- auto-create PRs to downstream branches after merge with configurable rules per repo
- Security Scanning -- secret detection (pre-receive blocking) + code analysis (SQL injection, XSS, command injection, path traversal, and more) with REST API for alerts, config, and on-demand scans
- Default Org Teams -- auto-create Developers, Reviewers, and CI/CD teams on org creation
- Org Metadata -- per-repo metadata API (public GET, admin PUT), platform detection for versioning
- Branch Protection -- delete allowlist for protected branches (per-user/team/deploy-key)
- Project Board API -- REST endpoints for project columns and cards
- CI Infrastructure -- reusable workflows, centralized ci-issue-reporter, standardized MOKOGITEA_TOKEN naming
- Dev Deploy Gate -- builds deploy to dev environment first, production checks dev health
Documentation
- Org Wiki -- standards, CLI reference, API docs
- Wiki Features -- all 10 wiki enhancements
- Licensing API
- Repo Wiki -- feature docs, API reference, operations
Contributing
See the org wiki for development guidelines, coding standards, and contribution instructions.
License
This project is licensed under the GNU General Public License v3.0 or later -- see the LICENSE file.