dd26c861fc3399cfc94e6b21ce5cfed1be222beb
Defense in depth for the repo-creation bot: a restricted Gitea account can only see repositories and organisations it is explicitly added to, so a leaked repospawner token cannot enumerate or read the rest of the estate. The repospawner team grant on terraform-git already covers everything the bot does, so nothing it needs is lost.
terraform-git
Manage Gitea resources, teams, repos, and Woodpecker CI via Terraform
Description
Languages
HCL
94.7%
Makefile
5.3%