gitGost

Recent Commits

• livrasand(31 Aug 26)

  Add political neutrality and legal compliance section (#209) Added a section on political neutrality and legal compliance to clarify the project's stance and user responsibilities.

• livrasand(31 Aug 26)

  Remove warning about Android restrictions (#208) Removed warning about Android being under threat and the call to action to keep Android open.

• livrasand(29 Aug 26)

  Update deploy-preview workflow for Fly.io deployment (#207) Updated the checkout action version and modified the setup steps for Flyctl installation.

• livrasand(29 Aug 26)

  Add GitHub Actions workflow for deploy preview (#206)

• livrasand(28 Aug 26)

  Grant actions write scope in CI workflows (#205) Update GitHub Actions permissions to explicitly allow `actions: write` where needed. `firmware-build.yml` moves from broad `read-all` to a tighter explicit set (`actions: write`, `contents: read`), and `release.yml` adds `actions: write` alongside existing release-related permissions.

• livrasand(28 Aug 26)

  Support GL/CB reactions and issue ntfy topics (#204) Extends the API to handle reactions for GitLab and Codeberg, fixes provider detection from route paths, and adds issue-level ntfy topic/status support with comment notifications. It also adds GitHub raw/avatar proxy endpoints and updates the web UI to use them (including image/README/markdown resources), introduces loading skeletons and toast feedback in profile/repo views, improves commit query handling, and updates workflows to pin GitHub Actions by commit SHA.

• livrasand(28 Aug 26)

  Add firmware build workflow and update release process; enhance READM… (#203) …E with screenshots and usage instructionså

• livrasand(27 Aug 26)

  Add gitGost Forge and node support (#202) Introduce the gitGost Forge foundation across the stack: new ESP32 firmware for provisioning, storage backends, and the node WebSocket protocol, plus server-side node pairing, persistence, and authenticated gitGost account access via ZKP session tokens. The web app now supports gitGost-native profiles, nodes, repos, branch/tag browsing, repo creation, compare views, and GitHub reactions/package downloads, while the docs and assets were updated to present GREN as beta and document the new Forge workflow. --------- Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

• livrasand(24 Aug 26)

  Harden auth, caching, and proxy safeguards (#200) This patch strengthens public-facing security by requiring optional ntfy bearer auth when NTFY_TOKEN is configured, warning on insecure admin topic/API key misconfiguration, and marking sensitive pages as no-store to prevent caching. It also tightens cookies with SameSiteStrict and validates Codeberg proxy paths to reject traversal attempts, while applying proxy rate limiting to previously unprotected external API routes.

• livrasand(24 Aug 26)

  Improve CAPTCHA, ZKP, Schnorr, ntfy & UI (#199) Security and robustness updates: add MENTA_CAPTCHA_ENFORCED to config and make Menta init fail-closed when enforced; verifyMentaCaptcha respects enforcement and logs warnings. Send ntfy notifications as JSON via newSafeHTTPClient with timeouts and escaped URLs. Limit in-memory ZKP registrations to 10k with FIFO eviction. Harden Schnorr ZKP: produce/verify canonical low-S responses, bind public key into Fiat–Shamir hash, retry nonces (fail if canonical not found) and add a test for malleability. getSecretKey retries CSPRNG and panics if unavailable. Only trust X-Forwarded-Proto for SERVICE_URL host. Tighten DOMPurify settings and safer UI error escaping.

• livrasand(24 Aug 26)

  ZKP security & sessionStorage UI updates (#198) Group ZKP endpoints behind zkpSecurity and rate-limiter middleware; enforce no-cache headers, max request body (16KB) and identity length (128), trim/validate identity, and purge expired/used challenges during challenge/verify flows. Update test to use zkpSecurity and assert no-store header. Replace use of localStorage with sessionStorage across web UI (index/profile/repo) for temporary tokens and comment tokens to avoid long-lived client-side persistence.

• livrasand(23 Aug 26)

  Add Schnorr-based ZKP authentication API (#197) Adds a new zero-knowledge authentication flow for P-256 Schnorr proofs. The server exposes register/challenge/verify endpoints, stores public keys and short-lived single-use challenges, and validates proofs without receiving private keys. It also documents the API in ARCHITECTURE.md and adds focused unit tests for completeness, invalid proofs, and replay protection.

• livrasand(23 Aug 26)

  Harden anonymous tokens and CDN safety (#196) Adds minimum-length validation for client-provided anonymous user tokens and rejects weak values before comment creation. It also pins the environment-badge CDN asset, makes the root route serve the static index page, and adds fail-closed HTML escaping fallbacks when DOMPurify is unavailable so README/profile content is rendered safely even if the CDN is blocked or offline.

• livrasand(23 Aug 26)

  Harden HTTP clients, SSRF and admin auth (#195) Security hardening across the HTTP layer and admin flows. Added safeSameHostRedirects and newSafeHTTPClient and replaced many raw http.Client uses to enforce timeouts and same-host/HTTPS redirect policies (including stricter release asset redirect allowlist). Tightened anonymous auth to exact git smart HTTP suffixes and constant-time API key checks. Reworked admin auth to use ephemeral session tokens (cookie-based), removed password-in-query usage, added constant-time password verification and session pruning. Improved input validation (content hash checks), escaped Supabase query params, made generateUserToken return errors and extended deriveHash to 16 hex chars. Added SSRF unit tests plus ROADMAP.md and SKILLS.md documentation.

• livrasand(22 Aug 26)

  Add comprehensive style guide for gitGost project (#194) This document outlines the coding, documentation, interface, and communication styles for the gitGost project to ensure consistency and maintainability.

• livrasand(22 Aug 26)

  Create SECURITY_CONTACTS file with security contacts (#193) Added security contacts for handling security issues.

• livrasand(22 Aug 26)

  Add contributing guidelines for gitGost (#192) Added a comprehensive contributing guide for the gitGost project, detailing the contribution process, development environment setup, project structure, supported providers, privacy considerations, security protocols, issue reporting, pull request guidelines, and documentation standards.

• livrasand(22 Aug 26)

  Revise security reporting process and language preference (#191) Updated the security reporting guidelines and added a preference for communication in Spanish.

• livrasand(22 Aug 26)

  Add file history and release downloads (#190) This change adds paginated file history views and a release asset download proxy for GitHub, GitLab, and Codeberg. It also reuses shared commit listing logic, adds validation tests for allowed hosts, and removes Google font dependencies in favor of native system/UI font stacks for the web UI.

• livrasand(21 Aug 26)

  Add blame and proxy cache support (#189) This change adds a shared blame API for GitHub, GitLab, and Codeberg, caches GitHub API proxy responses with ETag revalidation, and raises the proxy rate limit to avoid frontend bursts. It also improves SPA deep-linking and repo navigation, adds a WinUI-style scrollbar, and makes the repo UI more resilient to missing environment badge scripts and older API endpoints.

• livrasand(21 Aug 26)

  Add GitLab proxy and GitHub token rotation (#188) Introduce GitHub token rotation logic and add a GitLab API proxy. handlers.go: add doGitHubWithTokenRotation, use it for GitHub API and Discussions proxying (falls back to client-provided token), and implement GitLabProxyHandler (validates paths, forwards PRIVATE-TOKEN or Authorization, and copies response headers). router.go: register /gl-proxy route. web/profile.html & web/repo.html: adjust sidebar padding/max-width and inject proxiedProviderFetch to route gitlab.com/codeberg.org API/raw calls through server proxies. internal/http/github_proxy_test.go: add tests for GitHub token rotation and GitLab proxy. Minor formatting and error handling improvements.

• livrasand(21 Aug 26)

  Add GitHub API proxy and use in UI (#187) Introduce a server-side GitHub API proxy (GitHubAPIProxyHandler) that forwards browser requests to api.github.com using a token from the pool or the client's Authorization header. Add a unit test for the proxy. Wire the handler into the router at /api/gh-proxy/*path. Update web UI (index, profile, repo) to route GitHub API calls via the proxy (ghFetch) and to use absolute asset paths (/assets/...), including anonymous avatar and icon base updates.

• livrasand(21 Aug 26)

  Proxy Menta CAPTCHA through app API (#185) This change routes Menta CAPTCHA widget traffic through a local /api/captcha endpoint instead of calling the upstream service directly from browsers. A proxy handler forwards requests to the configured Menta API and applies a per-IP rate limit to prevent abuse. The report form and repo UI were updated to use the local endpoint.

• livrasand(17 Aug 26)

  Add environment badges and fly qa config (#182) Co-authored-by: Fly.io <[email protected]>

• livrasand(17 Aug 26)

  Add clean URLs and client-side routing (#180) Serve profile/repo pages with clean paths and enable client-side history navigation. Router: handle no-route GETs for /{provider}/{user}[/{view}] and /{provider}/{owner}/{repo}[/{view}], serving profile.html, repo.html or index.html as appropriate. Web UI (index.html, profile.html, repo.html): switch links from query params to /{provider}/{owner}/{repo} and /{provider}/{user} form, add PAGE/VIEW <-> path maps, pushState/popstate handling, and functions to build/parse clean URLs while keeping query-param fallbacks and provider-name normalization.

• livrasand(17 Aug 26)

  Add EthicalMetrics dashboard and XSS hardening (#179) Introduce a rich EthicalMetrics dashboard (chart, summaries, breakdowns, tooltips, styles) and loader in web/index.html to show site metrics. Harden UI code in web/profile.html by encoding PROVIDER in repo links, escaping/sanitizing generated HTML via DOMPurify when available, and sanitizing hrefs to reduce XSS risk. Suppress noisy console.error for aborted language color fetches in index.html and repo.html. Files changed: web/index.html, web/profile.html, web/repo.html.

• livrasand(16 Aug 26)

  Allow per-request GitHub token passthrough (#178) Add support for passing an optional GitHub service token per request (via push-option / API payload). ReceivePack now extracts a github-token push-option (and redacts it from logs) and threads it through to PushToGitHub and GitHub API calls. New token-aware wrappers added in internal/github; HTTP handlers and anonymous endpoints accept github_token; web UI adds a settings panel to save/send a token from the browser. README updated with usage and security guidance. This enables callers to use their own service account/rate-limit without exposing shared credentials.

• livrasand(15 Aug 26)

  Update README with token security and recommendations (#177) Added security note regarding token handling and included recommended images for configuration.

• livrasand(15 Aug 26)

  Add GitHub token pool and issue template support (#176) Introduce a tokenpool for round-robin GitHub tokens and rate-limit cooldowns; add githubDo wrapper to mark rate-limited tokens. Replace direct GITHUB_TOKEN env usage with tokenpool.NextGitHubToken across handlers and github client code. Add API to fetch and render GitHub issue templates (markdown and issue-form), new router endpoint, and HTTP handler. Enhance web UI (index.html, repo.html) to surface templates, improve anonymous-issue modal UX, and adjust wording to "service account." Update docs (README, ARCHITECTURE, Privacy Guarantees) and add screenshots. Minor formatting & decoding fixes for comment legend handling.

• livrasand(14 Aug 26)

  Add LICENSE file (#175) The aim is to protect users of gitGost and the forks they create and self-host, enabling them to audit and trust instances distributed by other forks.