qwc-open/tulli
Watch
1
0
Fork
You've already forked tulli
 0
Code Issues 21 Pull requests Projects Releases Packages Wiki Activity Actions
Labels Milestones
Search syntax
See the documentation for further details on search, operators, and filters.
"forgejo"
Include only results that match the term in quotes
assignee:<username>
Filter by assigned user
author:<username>
Filter by the author
is:all
All
is:closed
Closed
is:open
Open
mentions:<username>
Filter by mentioned user
modified:[>|<]<date>
Filter by last modified date
review:<username>
Filter by user who reviewed
sort:<by>:[asc|desc]
Sort by: created|comments|updated|deadline
New issue
21 Open 4 Closed 25 All
Label
Clear labels
Compat/Breaking
demo
hardening
identity
Kind/Bug
Kind/Documentation
Kind/Enhancement
Kind/Feature
Kind/Security
Kind/Testing
needs-verification
notify
ops
packaging
perf
Priority
Critical
Priority
High
Priority
Low
Priority
Medium
process
rbac
research
Reviewed
Confirmed
Reviewed
Duplicate
Reviewed
Invalid
Reviewed
Won't Fix
scanning
stage-6e
stage-6f
stage-6g
Status
Abandoned
Status
Blocked
Status
Need More Info
transport
web
Milestone
No milestone
Projects
Clear projects
Assignee
Clear assignees
No assignee
qwc
Nightly update of mirrors is fine, but we also need a button at the repository list to update immediately for whatever reason.
Kind/Enhancement
1
#22 opened 2026-07-13 13:53:16 +02:00 by qwc
Greeting / "get up to speed" onboarding page with pasteable git-config snippet
identity
Kind/Enhancement
web
#20 opened 2026-07-11 11:37:25 +02:00 by qwc
Option to discourage/disallow anonymous HTTP(S) fetching (first-fetch nudge → block, login for token URL)
identity
Kind/Enhancement
transport
1
#19 opened 2026-07-11 11:33:32 +02:00 by qwc
Add a "what's mirrored + verdict" helper (tullictl / compose one-liner)
#18 opened 2026-07-11 11:17:08 +02:00 by qwc
Switch to PR + issue workflow
process
#17 opened 2026-07-10 13:16:06 +02:00 by qwc
Repo rename + vanity import path
Kind/Documentation
ops
#16 opened 2026-07-10 13:16:04 +02:00 by qwc
§11.5 Black Duck (external async scanner) contract
research
scanning
#15 opened 2026-07-10 13:16:02 +02:00 by qwc
Native supply-chain heuristics vs external detectors
research
scanning
#14 opened 2026-07-10 13:16:00 +02:00 by qwc
On-timer CVE re-match (re-join without re-scan)
Kind/Enhancement
perf
scanning
#13 opened 2026-07-10 13:15:58 +02:00 by qwc
§8.8 Mirror refresh scheduler
Kind/Enhancement
scanning
1
#12 opened 2026-07-10 13:15:56 +02:00 by qwc
§8.3 Demand-anchored scan floor
Kind/Enhancement
perf
scanning
#11 opened 2026-07-10 13:15:54 +02:00 by qwc
Audit-events page in the UI
Kind/Enhancement
Priority
Low
web
#10 opened 2026-07-10 13:15:52 +02:00 by qwc 0 / 2
Verify the Trivy image on a real docker host
demo
Kind/Testing
needs-verification
packaging
Priority
Medium
#9 opened 2026-07-10 13:15:50 +02:00 by qwc 0 / 3
Wire the web surface into the demo stack
demo
Kind/Enhancement
packaging
Priority
High
1
#8 opened 2026-07-10 13:15:48 +02:00 by qwc 0 / 3
Production cookie & secret checklist
hardening
Kind/Security
ops
Priority
Medium
#7 opened 2026-07-10 13:15:44 +02:00 by qwc 0 / 3
CSRF: per-session HMAC token
hardening
Kind/Security
Priority
High
web
#6 opened 2026-07-10 13:15:42 +02:00 by qwc 0 / 3
Real notification sinks (SMTP / webhook)
Kind/Enhancement
notify
Priority
Medium
#5 opened 2026-07-10 13:15:39 +02:00 by qwc 0 / 4
Ref-level pull attribution (Strategy B want-parsing)
Kind/Enhancement
notify
Priority
High
transport
#4 opened 2026-07-10 13:15:37 +02:00 by qwc 0 / 5
Stage 6g — Full per-repo RBAC
Kind/Enhancement
rbac
stage-6g
#3 opened 2026-07-10 13:15:33 +02:00 by qwc 0 / 4
Stage 6f — First-class robot users
identity
Kind/Enhancement
stage-6f
#2 opened 2026-07-10 13:15:31 +02:00 by qwc 0 / 4