audit: review Forgejo API client for error handling and edge cases #1

Open
opened 2026-02-16 17:01:36 +00:00 by clotho · 0 comments
Member

Review the Forgejo/Git API client code in core/go-scm:

  1. Check HTTP error handling (timeouts, retries, status codes)
  2. Verify pagination is handled correctly
  3. Check for token leaks in logs or error messages
  4. Verify URL construction is safe (no injection via repo names)
  5. Check rate limiting handling

Post findings as a comment. Do not make code changes.

Review the Forgejo/Git API client code in core/go-scm: 1. Check HTTP error handling (timeouts, retries, status codes) 2. Verify pagination is handled correctly 3. Check for token leaks in logs or error messages 4. Verify URL construction is safe (no injection via repo names) 5. Check rate limiting handling Post findings as a comment. Do not make code changes.
clotho added the
clotho
audit
labels 2026-02-16 17:01:36 +00:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: core/go-scm#1
No description provided.