6 ms·
This is actually being discussed as well: https://framalistes.org/sympa/arc/git-federation/2018-06/msg00023.html https://framalistes.org/sympa/arc/git-federatio
by Arkanosis 8y ago
This is actually being discussed as well: https://framalistes.org/sympa/arc/git-federation/2018-06/msg00023.html https://framalistes.org/sympa/arc/git-federation/2018-06/msg...
The scope of GitPub is still under active definition, and it might end up not being specific to git only.
If you're a stakeholder of any service that could federate based on Mercurial, Bazaar… you're more than welcome to give your input to the working group.
- mikece 8y agoFirst thing first: I would hope that "Git" would be removed from the GitPub name. I'm in favor of replacing Git in the process and having both a new client source control implementation and server API set (SourcePub?) that are designed with each other in mind, eases federation, and is both powerful and easier for new devs than Git (Hg managed this... not sure why a Git replacement can't do the same).
- deleted 8y ago[deleted]
- Arkanosis 8y agoGitPub (or whatever it'll be named then) does not intend to replace git or any other VCS. Its stated goal is to enable federation between services such as GitHub, GitLab, Gogs, Gitea, Pagure… which happen to use git. In other words, it means that if GitPub was adopted by these services, you could submit a merge request from Pagure to Gitlab, or star a GitHub project from your own Gitea instance, among many other things.
- ReverseCold 8y ago> star a GitHub project from your own Gitea instance How do federated networks prevent someone from making a few hundred accounts and starring/liking a bunch of posts?
- r3bl 8y agoDoes it need to prevent them? Do stars in a repo represent something significant?
- OJFord 8y agoHow does a centralised network prevent someone from making a few hundred accounts and starring/liking a bunch of posts? We seem to be doing OK by not caring much.
- Rjevski 8y agoWell in this case why Github, GitLab, etc.. do not allow you to "star" a repo more than once? I'm fine with stars not being significant, but it's still not good if a malicious actor can suddenly spoof hundreds of accounts and spam stars, comments and what-not.
- OJFord 8y agoBecause that's a completely different interaction. You can still create another account and star it again. Sure, your IP will be rate-limited (GH at least) if you script it and start hammering stars, but that's not because it wants to protect the integrity of the repo star count.
- sytse 8y agoGreat to see this initiative, at GitLab we're actively following this, thanks for keeping us posted https://gitlab.com/gitlab-org/gitlab-ce/issues/4013#note_79942659 https://gitlab.com/gitlab-org/gitlab-ce/issues/4013#note_799...
- cjslep 8y agoGlad to hear! I hope GitLab will also provide feedback to the community group.
- sytse 8y agoFor sure, is there already a proposal for federated merge requests? Or can you make those from the activity stream? That would by the minimal viable change as far as I can see.
- Arkanosis 8y agoFederated merge requests are being discussed in this thread: https://framalistes.org/sympa/arc/git-federation/2018-06/msg00122.html https://framalistes.org/sympa/arc/git-federation/2018-06/msg... It's way too early for a proposal, but if someone from GitLab wants to give some input, that's more than welcome. Thanks!
- sytse 8y agoThanks for the pointer!
- deleted 8y ago[deleted]