gitproxy

package

Go to main page

Versions in this module

v0

v0.0.7

Oct 27, 2026

Changes in this version

+ const DefaultScanMaxDuration

+ const DefaultScanMaxObjectBytes

+ const DefaultScanMaxPushBytes

+ const ScanResultClean

+ const ScanResultIncomplete

+ const ScanResultLimit

+ const ScanResultSecret

+ const ScanResultUnreadable

+ const ScanResultUnscanned

+ const SettingPushScan

+ const SettingPushScanObjectMB

+ const SettingPushScanPushMB

+ const SettingPushScanSeconds

+ var ScanResults = []string

type DenyReason

+ const DenyScanLimit

+ const DenySecretInPush

+ const DenyUnreadablePack

type Event

+ Findings []ScanFinding

+ RunID string

+ Scan string

type EventKind

+ const EventPushSecretRefused

type Options

+ PushScan PushScanFunc

+ Routes []Route

+ type PushScan struct

+ Limits ScanLimits

+ Mode ScanMode

+ Secrets []ScanSecret

+ type PushScanFunc func(sess *Session) PushScan

+ type Route struct

+ Handler http.Handler

+ Prefix string

+ type ScanFinding struct

+ Base string

+ Commit string

+ Field string

+ Form string

+ Grant string

+ Object string

+ Path string

+ PathPartial bool

+ Ref string

+ Secret string

+ Tag string

+ Type string

+ Where string

+ type ScanLimits struct

+ MaxDuration time.Duration

+ MaxObjectBytes int64

+ MaxPushBytes int64

+ type ScanMode string

+ const ScanOff

+ const ScanShapes

+ const ScanValues

+ func ParseScanMode(s string) (ScanMode, error)

+ func StricterScanMode(a, b ScanMode) ScanMode

+ func (m ScanMode) Normalize() ScanMode

+ type ScanSecret struct

+ Field string

+ Grant string

+ Secret string

+ Value string

v0.0.6

Oct 16, 2026

Changes in this version

+ const ForgeRouteSegment

+ var ErrWrongForge = errors.New("gitproxy: session is for another forge host")

+ func ForgeRoute(base, host string) (string, error)

+ func RenewMargin(ttl time.Duration) time.Duration

+ func RenewTick(ttl time.Duration) time.Duration

type EventKind

+ const EventSessionRenewed

type MintRequest

+ ForgeHost string

type Registry

+ func (r *Registry) LeaseSessions(leaseID string) []*Session

+ func (r *Registry) Renew(id string, ttl time.Duration) (time.Time, error)

+ func (r *Registry) RenewDue(id string, ttl time.Duration) (bool, time.Time, error)

+ func (r *Registry) RenewalDue(id string, ttl time.Duration) bool

type Session

+ ForgeHost string

+ func (s *Session) RenewedAt() time.Time

type SessionRecord

+ ForgeHost string

+ RenewedAt time.Time

type SessionStore

+ RenewSession func(id string, expiresAt, renewedAt time.Time) error

v0.0.5

Oct 12, 2026

Changes in this version

+ const CredentialRefreshWindow

+ const DefaultListenAddr

+ var ErrCredentialRefused = errors.New("gitproxy: upstream credential will not be renewed")

+ var ErrSessionExists = errors.New("gitproxy: a session with that id is already live")

+ var ErrSessionLapsed = errors.New("gitproxy: session lapsed before it could be restored")

+ func AdvertisedBaseURL(advertise string, bound net.Addr) (string, error)

+ func NormalizeBaseURL(raw string) (string, error)

type EventKind

+ const EventSessionRestored

type MintRequest

+ CredentialExpiresAt time.Time

+ Durable bool

+ OnEnd func()

+ Refresh RefreshFunc

+ RunID string

type Options

+ Fallback func(w http.ResponseWriter, r *http.Request, sessionID string) bool

+ type RefreshFunc func(ctx context.Context, held string) (Refreshed, error)

+ type Refreshed struct

+ Credential Credential

+ ExpiresAt time.Time

+ Retire func()

type Registry

+ Store SessionStore

+ func (r *Registry) CheckRestore(rec SessionRecord) error

+ func (r *Registry) CloseForGrant(leaseID, grantID, reason string) int

+ func (r *Registry) CloseForLease(leaseID, reason string) int

+ func (r *Registry) Known(id string) bool

+ func (r *Registry) Restore(req RestoreRequest) (*Session, error)

+ func (r *Registry) Suspend(id, reason string) bool

+ func (r *Registry) SuspendForLease(leaseID, reason string) []string

+ type RestoreRequest struct

+ Credential Credential

+ CredentialExpiresAt time.Time

+ From string

+ OnEnd func()

+ Record SessionRecord

+ Refresh RefreshFunc

type Session

+ GrantID string

+ LeaseID string

+ RunID string

+ func (s *Session) CredentialExpiresAt() time.Time

+ func (s *Session) Durable() bool

+ func (s *Session) Refreshable() bool

+ func (s *Session) Used() bool

+ type SessionRecord struct

+ Actor string

+ ExecutorID string

+ ExpiresAt time.Time

+ GrantID string

+ ID string

+ IssuedAt time.Time

+ LeaseID string

+ Policy Policy

+ ProjectID string

+ RepoPath string

+ RepoPatterns []string

+ RunID string

+ TaskID string

+ TokenSHA256 string

+ Upstream string

+ type SessionStore interface

+ CloseSession func(id, reason string, at time.Time) error

+ SaveSession func(rec SessionRecord) error

v0.0.4

Sep 27, 2026

v0.0.3

Sep 27, 2026

Changes in this version

type Policy

+ RestrictRefs []string

+ func (p Policy) RefSummary() string

+ func (p Policy) Restricted() bool

type RefDenial

+ Ref string

v0.0.2

Sep 17, 2026

Changes in this version

+ const MaxRepoPatterns

+ func NormalizeRepoPath(p string) string

+ func UpstreamHostBase(raw string) (string, error)

+ func ValidateRepoPattern(pattern string) error

type MintRequest

+ RepoPatterns []string

type Session

+ RepoPatterns []string

+ func (s *Session) AllowsRepo(repoPath string) bool

+ func (s *Session) Scoped() bool

v0.0.1

Sep 13, 2026

Changes in this version

+ const DefaultMaxCommands

+ const DefaultMaxPackBytes

+ const DefaultSessionTTL

+ const MaxRefPatterns

+ const MaxSessionTTL

+ var AllDenyReasons = []DenyReason

+ var DefaultAllowedRef = "refs/heads/" + executor.WriteBackBranchPrefix + "**"

+ var ErrRefDenied = errors.New("ref update denied by policy")

+ var ErrSessionNotFound = errors.New("gitproxy: session not found")

+ var ErrUnauthenticated = errors.New("gitproxy: unauthenticated")

+ var ErrWrongRepo = errors.New("gitproxy: session is not scoped to this repository")

+ func UpstreamRepoPath(upstream string) (string, error)

+ func ValidateRefName(ref string) error

+ type Credential struct

+ GrantID string

+ LeaseID string

+ Password string

+ Username string

+ func (c Credential) Empty() bool

+ type Decision struct

+ Err error

+ Update RefUpdate

+ func (d Decision) Allowed() bool

+ func (d Decision) Reason() string

+ type DenyReason string

+ const DenyCreate

+ const DenyDelete

+ const DenyNoWrite

+ const DenyPushCert

+ const DenyRefNotAllowed

+ const DenyTooManyCommands

+ const DenyUpdate

+ func DenyReasonOf(err error) (DenyReason, bool)

+ type Event struct

+ Actor string

+ At time.Time

+ Detail string

+ Kind EventKind

+ ProjectID string

+ Refs []string

+ RepoPath string

+ SessionID string

+ TaskID string

+ func (e Event) String() string

+ type EventKind string

+ const EventFetch

+ const EventPushAllowed

+ const EventPushDenied

+ const EventRejected

+ const EventSessionClosed

+ const EventSessionMinted

+ type MintRequest struct

+ Actor string

+ Credential Credential

+ ExecutorID string

+ Policy Policy

+ ProjectID string

+ TTL time.Duration

+ TaskID string

+ Upstream string

+ type Minted struct

+ RepoURL string

+ Session *Session

+ Token string

+ func (m Minted) Credential() Credential

+ type Options struct

+ Transport http.RoundTripper

+ type Policy struct

+ AllowCreate bool

+ AllowDelete bool

+ AllowFetch bool

+ AllowUpdate bool

+ AllowedRefs []string

+ MaxCommands int

+ MaxPackBytes int64

+ func WriteBackPolicy() Policy

+ func (p *Policy) Normalize()

+ func (p Policy) AllowsRef(ref string) bool

+ func (p Policy) Decide(u RefUpdate) error

+ func (p Policy) DecideAll(cmds []RefUpdate) ([]Decision, bool)

+ func (p Policy) IsZero() bool

+ func (p Policy) Validate() error

+ type Proxy struct

+ func New(reg *Registry, opts Options) (*Proxy, error)

+ func (p *Proxy) Addr() string

+ func (p *Proxy) Close() error

+ func (p *Proxy) Registry() *Registry

+ func (p *Proxy) Serve(ln net.Listener) error

+ func (p *Proxy) ServeHTTP(w http.ResponseWriter, r *http.Request)

+ type ReceivePack struct

+ Capabilities []string

+ Commands []RefUpdate

+ Shallow []string

+ func ParseReceivePack(body io.Reader) (*ReceivePack, io.Reader, error)

+ func (r *ReceivePack) HasCapability(name string) bool

+ func (r *ReceivePack) WantsReportStatus() bool

+ func (r *ReceivePack) WantsSideband() bool

+ type RefDenial struct

+ Message string

+ Reason DenyReason

+ func (e *RefDenial) Error() string

+ func (e *RefDenial) Unwrap() error

+ type RefUpdate struct

+ New string

+ Old string

+ Ref string

+ func (u RefUpdate) Action() string

+ func (u RefUpdate) IsCreate() bool

+ func (u RefUpdate) IsDelete() bool

+ func (u RefUpdate) IsUpdate() bool

+ func (u RefUpdate) String() string

+ type Registry struct

+ BaseURL string

+ Now func() time.Time

+ OnEvent func(Event)

+ func NewRegistry(baseURL string) (*Registry, error)

+ func (r *Registry) Authenticate(id, token string) (*Session, error)

+ func (r *Registry) Close(id, reason string)

+ func (r *Registry) Mint(req MintRequest) (*Minted, error)

+ func (r *Registry) ReapExpired() int

+ func (r *Registry) Session(id string) (*Session, error)

+ func (r *Registry) Sessions() []*Session

+ type Session struct

+ Actor string

+ ExecutorID string

+ ExpiresAt time.Time

+ ID string

+ IssuedAt time.Time

+ Policy Policy

+ ProjectID string

+ RepoPath string

+ TaskID string

+ Upstream string

+ func (s *Session) CloseReason() string

+ func (s *Session) Closed() bool

+ func (s *Session) Expired(now time.Time) bool

+ func (s *Session) Stats() Stats

+ type Stats struct

+ BytesDown int64

+ BytesUp int64

+ Denied int64

+ Fetches int64

+ Pushes int64

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL