-
Notifications
You must be signed in to change notification settings - Fork 484
Feat/grep #483
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Feat/grep #483
Changes from all commits
Commits
Show all changes
44 commits
Select commit
Hold shift + click to select a range
542ae20
initial gitbucket implementation with PAT auth
dhirenmathur cc3fb9f
Gitbucket support
dhirenmathur 21aad2f
Merge cc3fb9ff8b38b9719a090b1e44c6674bbac07157 into 5e3aca3795670d565…
dhirenmathur 6c2294a
chore: Auto-fix pre-commit issues
github-actions[bot] e295fe6
Remove .codex from repo
dhirenmathur 5cf047e
remove gitbucket webhook and unnecessary docs
dhirenmathur 6cf0796
Merge branch 'gitbucket' of https://github.com/potpie-ai/potpie into …
dhirenmathur b4cec92
Merge 6cf0796c003e96f7fa0fbaa9b25919838a811400 into 5e3aca3795670d565…
dhirenmathur b7423a9
chore: Auto-fix pre-commit issues
github-actions[bot] dcc290f
fix reparse issue
dhirenmathur 6f80d75
Fix gitbucket compatibility in tools
dhirenmathur 81433ca
Merge branch 'gitbucket' of https://github.com/potpie-ai/potpie into …
dhirenmathur 07a9469
Merge 81433cafe9f01fb30667a69ba0de119ad23968a1 into 0dea48e065bd15c5a…
dhirenmathur af65c7e
chore: Auto-fix pre-commit issues
github-actions[bot] 84f9e90
Add local provider support and harden code tooling
dhirenmathur 60b924b
Merge branch 'main' into gitbucket
dhirenmathur 3000fc6
Merge 60b924bdc2aa4db6b7f1dfe5c7a5cdba06f901e7 into 56adc4f76ef49999b…
dhirenmathur e686369
chore: Auto-fix pre-commit issues
github-actions[bot] 0827525
restore github access
dhirenmathur 6bf07c3
Merge 0827525d43b91b6b6797cef98f376d4017dfa119 into 56adc4f76ef49999b…
dhirenmathur c750e2f
chore: Auto-fix pre-commit issues
github-actions[bot] 0c898e7
update exteption handling
dhirenmathur defd6a3
update github auth
dhirenmathur d24afdf
Merge branch 'gitbucket' of https://github.com/potpie-ai/potpie into …
dhirenmathur 8ba63e0
Merge d24afdf53739d480ab6e0545be5a96ead46673b5 into 56adc4f76ef49999b…
dhirenmathur 1eda9a0
chore: Auto-fix pre-commit issues
github-actions[bot] 3debd92
fix: make GitHub authentication production-ready
dhirenmathur f89b0a1
Update readme
dhirenmathur 9d1611d
Merge branch 'gitbucket' of https://github.com/potpie-ai/potpie into …
dhirenmathur 6432898
Merge 9d1611d7d7df3c50b1028eb257a9ed0e40b75473 into 56adc4f76ef49999b…
dhirenmathur 8cdd3a5
chore: Auto-fix pre-commit issues
github-actions[bot] a2ed19e
feat: add grep tool
nndn3 7bd8053
feat: update jenkins pipeline to support arbitrary branch
nndn3 22d2833
feat: use gvisor in dockerfile
nndn3 1091ad1
fix: staging jenkins
nndn3 356e3e5
fix: repo manager build
nndn3 0bf6485
Merge branch 'main' into feat/grep
nndn3 385ce59
Merge 0bf6485a9f3626e28c73e0e9801c6ab9d0005563 into f200b371f0f0cc64d…
nndn c6c09b3
chore: Auto-fix pre-commit issues
github-actions[bot] a8ca0a3
feat: fix parsing helper
nndn3 7c67f5e
fix: review comments
nndn 309f77b
Merge 7c67f5ebe4d41aaa84d18fd233e89a74cb975437 into c9a2acb0cd7f09663…
nndn fc5d140
chore: Auto-fix pre-commit issues
github-actions[bot] 7781a3c
Merge branch 'main' into feat/grep
nndn File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Some comments aren't visible on the classic Files Changed page.
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -74,3 +74,4 @@ package-lock.json | |
| thoughts/ | ||
| .codex/ | ||
| worktrees/ | ||
| .repos/ | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🧩 Analysis chain
Critical security risk: sensitive dotfiles may be exposed.
The change from excluding all hidden files to only excluding
.gitcould expose sensitive dotfiles containing secrets, credentials, and API keys. Files like.env,.env.local,.env.production,.npmrc,.pypirc,.aws/credentials, and similar configuration files are commonly present but not always gitignored.Relying solely on gitignore (lines 239-247) is insufficient because:
Apply this diff to add explicit exclusions for common secret-containing files:
Run the following script to verify if there are other security safeguards in the codebase that prevent exposing sensitive files:
🏁 Script executed:
Length of output: 115142
Length of output: 623
🏁 Script executed:
Length of output: 3452
Critical security risk: sensitive dotfiles may be exposed through repository structure API.
The change at lines 228-229 now only excludes
.git, but previously excluded all hidden files. This exposes sensitive dotfiles like.env,.env.local,.npmrc,.pypirc,.aws/credentials,.ssh, and.gnupgto the structure listing.Relying solely on gitignore filtering (lines 239-247) is insufficient because:
get_file_content()to prevent accessSince this service remains in active use (despite being deprecated for backward compatibility), exposed sensitive file paths could be leveraged to extract secrets from local repositories.
Add explicit exclusions for common secret-containing files:
📝 Committable suggestion