Skip to content

Path policies - #4

Merged
Axenos-dev merged 5 commits into
mainfrom
feat/path-policies
Jul 7, 2026
Merged

Path policies#4
Axenos-dev merged 5 commits into
mainfrom
feat/path-policies

Conversation

@Axenos-dev

Copy link
Copy Markdown
Owner

Path policies

  • Per-repo path policies: block a path (and its subtree) from being added/modified; deletes always allowed
  • GET/POST/DELETE /repositories/{id}/path-policies — CRUD with optional human reason, echoed in rejections
  • Enforcement on API commits: POST /commits422 path_blocked before anything touches the backend
  • Enforcement on git push: pre-receive hook — the server binary in hook mode, one shared shim + core.hooksPath injected per-push via env
  • Per-commit checking (a blocked path added and removed within one push is still refused), fail-closed on any hook error
  • Migration 0005_path_policies (pattern, extensible kind, reason)

@Axenos-dev
Axenos-dev merged commit fba3e7e into main Jul 7, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant