security
Secrets in argv, and scanners that fail open
A git clone with Authorization on argv is readable from ps, and a scanner that swallows errors is a silent pass. Two fixes from a PR review.
Read the entry →#git
4 entries tagged “git”.
git
Exit code 126 in CI: the exec bit git never committed
A GitHub Actions step failed with Permission denied and exit code 126. The script was committed as 100644 because core.fileMode was off. Here's the fix.
Read the entry → GitProxy
How to write a GitProxy plugin: a diff-scanning example
How to write a GitProxy plugin: a complete diff-scanning example, how to pick the right chain phase, and why a plugin can load and still never run.
Read the entry → git
Moving a Git tag to a newer commit
Moving a Git tag to a newer commit takes a force push, or Git rejects it because the tag already exists. Here's how, plus the gotcha that bites teammates.
Read the entry →