GustedandGusted 13e48ead92 feat: migrate action secrets to keying to store them more securely (#8692) ...

- Use the keying module, that was introduced in forgejo/forgejo#5041, to store action secrets safely and securely in the database.
- Introduce a central function that sets the secret, `SetSecret` and let the caller do the update call. This is similar to how the twofactor (TOTP) models does it. Ref. https://codeberg.org/forgejo/forgejo/pulls/6074
- Add a relaxed migration, that is run inside a transaction. If it cannot decrypt a action secret, then it's deleted.

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/8692
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Co-authored-by: Gusted <postmaster@gusted.xyz>
Co-committed-by: Gusted <postmaster@gusted.xyz>

2025-07-29 01:03:36 +02:00

..

actions

Update module code.forgejo.org/forgejo/act to v1.32.0 (forgejo) (#8502)

2025-07-23 01:01:31 +02:00

activities

fix: make the action feed resilient to database inconsistencies (#8617)

2025-07-22 23:40:30 +02:00

admin

chore: branding import path (#7337)

2025-03-27 19:40:14 +00:00

asymkey

chore: do not require empty fixtures to clean tables (#8353)

2025-06-30 23:04:16 +02:00

auth

feat: consider WebAuthn & SSH for instance signing (#7693)

2025-04-29 10:34:07 +00:00

avatars

chore: branding import path (#7337)

2025-03-27 19:40:14 +00:00

db

feat: add tracing logs after process is complete (#8680)

2025-07-26 05:44:58 +02:00

dbfs

Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)

2025-03-28 22:22:21 +00:00

fixtures

fix: make the action feed resilient to database inconsistencies (#8617)

2025-07-22 23:40:30 +02:00

forgefed

Federated user activity following: Isolated model changes (#8078)

2025-06-21 12:02:58 +02:00

forgejo/semver

Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)

2025-03-28 22:22:21 +00:00

forgejo_migrations

feat: migrate action secrets to keying to store them more securely (#8692)

2025-07-29 01:03:36 +02:00

git

feat: always publish the link to the commit status (#8177)

2025-06-13 12:41:34 +02:00

issues

feat(ui): add links to review request targets in issue comments (#8239)

2025-07-23 04:45:58 +02:00

migrations

feat: migrate action secrets to keying to store them more securely (#8692)

2025-07-29 01:03:36 +02:00

moderation

feat: add configurable timeout for automatically removing resolved reports (#7940)

2025-07-28 14:52:13 +02:00

organization

feat(ui): add links to review request targets in issue comments (#8239)

2025-07-23 04:45:58 +02:00

packages

several fixes of ALT Package registry (#8475)

2025-07-10 17:12:07 +02:00

perm

Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)

2025-03-28 22:22:21 +00:00

project

chore(cleanup): replaces unnecessary calls to formatting functions by non-formatting equivalents (#7994)

2025-05-29 17:34:29 +02:00

pull

fix: do not ignore automerge while a PR is checking for conflicts (#8189)

2025-06-17 10:58:07 +02:00

quota

fix: ignore expired artifacts for quota calculation (#7976)

2025-05-28 18:22:10 +02:00

repo

fix: assorted ActivityPub code only refactors (#8708)

2025-07-28 15:17:29 +02:00

secret

feat: migrate action secrets to keying to store them more securely (#8692)

2025-07-29 01:03:36 +02:00

shared/types

chore: branding import path (#7337)

2025-03-27 19:40:14 +00:00

system

Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)

2025-03-28 22:22:21 +00:00

unit

feat: configurable default units for mirrors (#7902)

2025-06-03 08:12:29 +02:00

unittest

chore: do not require empty fixtures to clean tables (#8353)

2025-06-30 23:04:16 +02:00

user

fix: assorted ActivityPub code only refactors (#8708)

2025-07-28 15:17:29 +02:00

webhook

Actions Failure, Succes, Recover Webhooks (#7508)

2025-06-03 14:29:19 +02:00

error.go

API: enforce sha requirement on POST /repos/{owner}/{repo}/contents (#8139)

2025-06-12 00:13:39 +02:00

main_test.go

chore: branding import path (#7337)

2025-03-27 19:40:14 +00:00

org_team_test.go

Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)

2025-03-28 22:22:21 +00:00

org_team.go

chore: branding import path (#7337)

2025-03-27 19:40:14 +00:00

org_test.go

Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)

2025-03-28 22:22:21 +00:00

org.go

chore: branding import path (#7337)

2025-03-27 19:40:14 +00:00

repo_test.go

Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)

2025-03-28 22:22:21 +00:00

repo_transfer_test.go

Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo) (#7367)

2025-03-28 22:22:21 +00:00

repo_transfer.go

chore: branding import path (#7337)

2025-03-27 19:40:14 +00:00

repo.go

chore: branding import path (#7337)

2025-03-27 19:40:14 +00:00