6543

@ppulfer @WoodpeckerCI well a "git pull/fetch" forge backend can be added, it just needs to implement: user accounting, repo state management, ... so this is less a thing for woodpecker itselfe amd more a smal side brojekt that akts as kind of proxy ...

if it's not about status being reported back, just run a local forgejo/gitea and use the mirror function i would say ...

@schenklklopfer already done, still CVEs are for tooling to check if you have voulnerable tools etc, so i deem it still to be quite important.

-> not everyone uses auto-update or follows the project on mastodon ;)

I try to get a #CVE for weeks, no response!
Neither mitre nor github is responding at all :/

Does someone know more?!?!

#security #mitre #github #report #foss #WoodpeckerCI

@mauvehed

do you have a link to those 3d files?

thx