Re: GitHub “pull request” is useful and can be easily integrated'’
- To: debian-devel@lists.debian.org
- Subject: Re: GitHub “pull request” is useful and can be easily integrated'’
- From: Florian Weimer <fw@deneb.enyo.de>
- Date: Sun, 19 Jul 2015 13:16:32 +0200
- Message-id: <[🔎] 87fv4kgzxr.fsf@mid.deneb.enyo.de>
- In-reply-to: <[🔎] CAKTje6HE_orxK9jrrJD1O2_CE1EY_vsf=Yt-wJA7ZYFKJyO7oA@mail.gmail.com> (Paul Wise's message of "Sun, 19 Jul 2015 18:19:33 +0800")
- References: <CAJxTCxxwibge546jAWP3TOKtd2NHCJHSTG_G8qK1CwAVncrURA@mail.gmail.com> <CANBHLUirpnTo_pw7X9Srg=dKk2oV9Eqrntnf8=CLceYy4QwDMQ@mail.gmail.com> <CAHKYmevzphp5oYoACJnEK-jkYrmihBkaJwBUe-HEijX14xXpVA@mail.gmail.com> <BLU437-SMTP9993CCC8A5004782F6A5F4BCE40@phx.gbl> <20150417160611.GA13887@chew.redmars.org> <553152BD.4040900@me.com> <20150417194006.GA2208@helios.pault.ag> <E1YjFGL-0003x0-1q@mail.einval.com> <87iocu1fp5.fsf@hope.eyrie.org> <85y4lqqkfx.fsf@benfinney.id.au> <874moe16n4.fsf@hope.eyrie.org> <857ft9rhui.fsf_-_@benfinney.id.au> <20150418091230.0bd80d3a@sylvester.codehelp> <85wq18pk5q.fsf@benfinney.id.au> <20150419142817.79378b7b@sylvester.codehelp> <85lhhop5fc.fsf@benfinney.id.au> <CAA0ZO6CtwcTg4219iUaVO8Pmv8fOc+ufE03JGbjKARy9_RBvzQ@mail.gmail.com> <1429535164.471438.256056465.3C272BE7@webmail.messagingengine.com> <[🔎] 87pp3oiijz.fsf@mid.deneb.enyo.de> <[🔎] CAKTje6HE_orxK9jrrJD1O2_CE1EY_vsf=Yt-wJA7ZYFKJyO7oA@mail.gmail.com>
* Paul Wise:
> On Sun, Jul 19, 2015 at 5:49 PM, Florian Weimer wrote:
>
>> I don't quite understand this criticism. Surely direct write access
>> to the repository always needs some sort of authentication step?
>
> Not sure about for http/https/ssh but the git protocol allows for
> anonymous push access and git-daemon supports that if you turn it on.
> On top of that you can layer some restrictions using hooks.
>
> https://ikiwiki.info/tips/untrusted_git_push/
Sure, and it's also possible to have shared accounts with well-known
passwords, see anonymous CVS. But for write access, this is such a
fringe use case that I don't think this is what concerns people.
Reply to: