3 ms·
Was PHP's Git server using a self hosted Gitlab instance? I can't find the past threads, but I thought there was an announcement a while back that they were mov
by cccat 6y ago
Was PHP's Git server using a self hosted Gitlab instance? I can't find the past threads, but I thought there was an announcement a while back that they were moving to Gitlab self-hosted. Maybe I'm misrembering which project that was?
- hannob 6y agoIt seems they use some combination of gitolite and their own stuff. The post mentions karma, there's some code here: https://github.com/php/karma/ https://github.com/php/karma/
- cccat 6y agoThanks. That's a bit of a relief, given that we use self-hosted GitLab instances.
- INTPenis 6y agoWell it's still vulnerable. At least in Gitlab you can use fancy features like requiring 2FA for members of a group. But you still need to secure its infrastructure. I think the most common attacks on Github repos and groups have been on individual accounts. Which 2FA would mitigate.
- ynezz 6y ago> Which 2FA would mitigate. Or Rust, right? </sarcasm> https://github.com/php/karma/search?q=exec https://github.com/php/karma/search?q=exec