Issues - sixfold-space/madtea - Forgejo: Beyond coding. We forge.

sixfold-space/madtea

SHA256

Search syntax

`assignee:<username>`	Filter by assigned user
`author:<username>`	Filter by the author
`is:all`	All
`is:closed`	Closed
`is:open`	Open
`mentions:<username>`	Filter by mentioned user
`modified:[>\|<]<date>`	Filter by last modified date
`review:<username>`	Filter by user who reviewed
`sort:<by>:[asc\|desc]`	Sort by: `created\|comments\|updated\|deadline`

New issue

Apply redactToHost to the 403 scope-hint URL so a userinfo-bearing madtea.url can't echo credentials

#275 by hexajon was closed 2026-07-19 19:27:42 +00:00

Security: install stale-sweep executes candidate binaries from user-writable dirs

#274 by hexajon was closed 2026-07-19 19:27:42 +00:00

Security hardening: add explicit permissions: {contents: read} to both workflows

#273 by hexajon was closed 2026-07-19 19:28:40 +00:00

Document a sudoers caveat for madtea update in SECURITY.md (as-root arbitrary read via --apply)

#269 by hexajon was closed 2026-07-19 20:21:10 +00:00

Tighten analytics usage log to 0600 for consistency with other on-disk writes

#268 by hexajon was closed 2026-07-19 19:27:41 +00:00

Security hardening: pin the go install @latest tool fetches in CI and setup-dev.sh

#267 by hexajon was closed 2026-07-19 19:28:40 +00:00

madt_auth_use_ssh skips DirScope.resolve and can mutate a foreign primary checkout's remote

#262 by hexajon was closed 2026-07-19 19:27:41 +00:00