forked from mirrors/kingfisher
Erich Blume
677c7a5d5f
Some checks failed
ClusterFuzzLite PR fuzzing / PR (address) (pull_request) Has been cancelled
CI Pull Request / Linux x64 (pull_request) Has been cancelled
CI Pull Request / Linux arm64 (pull_request) Has been cancelled
CI Pull Request / macOS arm64 (pull_request) Has been cancelled
CI Pull Request / Windows arm64 (pull_request) Has been cancelled
CI Pull Request / Windows x64 (pull_request) Has been cancelled
When scanning a self-hosted Gitea/Forgejo instance, the API may be
reachable at a different hostname than the git clone endpoint (e.g.,
internal API vs. public clone URL behind a reverse proxy). The
--clone-url-base flag rewrites the scheme, host, and port of clone
URLs returned by the API, preserving the path.
Example:
kingfisher scan gitea \
--api-url https://forge.internal.example.com/api/v1/ \
--clone-url-base https://forge.internal.example.com/ \
--user eblume
This avoids routing clone traffic through an external proxy when the
API and git endpoints share the same internal host but the instance's
ROOT_URL points to the public endpoint.
Includes unit tests for the URL rewriting function and an integration
test using wiremock to verify the full enumeration path.
|
||
|---|---|---|
| .. | ||
| cli.rs | ||
| cli_failure.rs | ||
| cli_git_clone_flags.rs | ||
| cli_subcommands.rs | ||
| cli_validate_revoke.rs | ||
| dependent_rule_dedup.rs | ||
| fingerprint_dedup.rs | ||
| int_allowlist.rs | ||
| int_base64.rs | ||
| int_bitbucket.rs | ||
| int_dedup.rs | ||
| int_gitea_clone_url_base.rs | ||
| int_github.rs | ||
| int_gitlab.rs | ||
| int_local_path_validation.rs | ||
| int_quiet.rs | ||
| int_redact.rs | ||
| int_rules_no_validated_findings.rs | ||
| int_s3.rs | ||
| int_slack.rs | ||
| int_teams.rs | ||
| int_uri_parsing.rs | ||
| int_validation_cache.rs | ||
| int_vulnerable_files.rs | ||
| jdbc_rule.rs | ||
| library_crates_external_project.rs | ||
| live_db_validation.rs | ||
| pre_commit_installer.rs | ||
| smoke_archive.rs | ||
| smoke_baseline.rs | ||
| smoke_branch.rs | ||
| smoke_check_rules.rs | ||
| smoke_docker.rs | ||
| smoke_exclude.rs | ||
| smoke_fs.rs | ||
| smoke_git.rs | ||
| smoke_github_homebrew.rs | ||
| smoke_sqlite.rs | ||
| smoke_update.rs | ||
| tls_mode.rs | ||