git-proxy
git-proxy copied to clipboard
finos
Deploy custom push protections and policies on top of Git
This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Config Migration Needed - [ ] Select this checkbox to let Renovate create...
![renovate[bot] avatar](https://avatars.githubusercontent.com/in/2740?v=4 "renovate[bot] avatar"){kind=avatar}
**Describe the bug** When logging in via the UI, the following error is received: ```bash Error: CSRF token missing at checkCsrf (.../git-proxy/node_modules/lusca/lib/csrf.js:169:18) ``` **To Reproduce** 1. Checkout to the `reconcile`...
### Brief 💼 As we scale up our community and contributors, it would be cool to create a page on our [GitProxy site](https://git-proxy.finos.org) which shows all of our virtual and...
Although GitHub's native secret detection is in place, there are various ways secrets can end up in files and commits. Plus, an extra layer of protection never hurts! 👍 To...
We have a collection tests that validate git-proxy internals but nothing which runs in CI that validates changes acting as a client integrating with the git-proxy server(s). Tests should be...
Tracking issue to revisit Git Proxy's internal architecture and figuring out how best to design the application going forward. I'm including my initial sketch and using this issue to bounce...
At the moment, the Git Proxy slogan on [git-proxy.finos.org](http://git-proxy.finos.org/) is "Deploy custom push protections and policies on top of Git". I'd propose to update it, in order to stress more...
**Describe the bug** git push hangs with Git Proxy when testing with a GitHub repo on MacOS. **To Reproduce** Steps to reproduce the behavior: 1. unzip [git-proxy-issue.tar.gz](https://github.com/finos/git-proxy/files/14829220/git-proxy-issue.tar.gz) 2. start git-proxy...
Git-proxy does a lot "under the hood". For operators, it would be beneficial for git-proxy to emit messages using structured logging using a library such as [`winston`](https://github.com/winstonjs/winston) to better indicate...
To ensure we don't unnecessarily hit "dependency bloat" nor merge pull requests with dependencies that are unused, we should introduce a GitHub Action or CI step to detect which dependencies...