7 Commits

Include renames

Author	SHA1	Message	Date
Jörg ThalheimandJanne Heß	b47b187553	webhooks: implement authentication for GitHub and Gitea ... - Add HMAC-SHA256 signature verification for webhooks - Support multiple secrets for rotation - Add security logging for authentication events - Maintain backward compatibility (auth optional during migration) - Add comprehensive test coverage Without authentication, anyone could trigger job evaluations by sending POST requests to webhook endpoints. This could lead to resource exhaustion through repeated requests or manipulation of build scheduling. While not a data breach risk, it allows unauthorized control over CI/CD operations.	2025-08-10 12:41:47 +02:00
Martin Weinelt	f730433789	Create eval-jobset role and guard /api/push route	2024-08-27 19:49:05 +02:00
Janne HeßandMartin Weinelt	916531dc9c	api: Require POST for /api/push	2024-08-27 17:52:13 +02:00
Graham Christensen	a81e358016	API: test api/push-github	2022-01-14 14:57:32 -05:00
Graham Christensen	20db82b001	API test /api/push	2022-01-14 14:57:24 -05:00
Graham Christensen	fe095a56c5	API: test /nrbuilds and fix jobset / project references	2022-01-14 14:57:15 -05:00
Graham Christensen	e5c8a35423	API: test fetching the queue and latestbuilds	2022-01-14 14:57:03 -05:00