1
1
mirror of https://github.com/go-gitea/gitea synced 2024-12-27 11:04:26 +00:00
gitea/modules/migrations/base
zeripath 544ef7d394
Encrypt migration credentials at rest (#15895) (#16187)
Backport #15895

Storing these credentials is a liability.

* Encrypt credentials with SECRET_KEY before persisting to task queue table (they need to be persisted due to the nature of the task queue)
  - security in depth: helps when attacker has access to DB only, but not app.ini
* Delete all credentials (even encrypted) from the task table, once the migration is done, for safety
  - security in depth: minimizes leaked data if attacker gains access to snapshot of both DB and app.ini
2021-06-17 22:59:28 +02:00
..
comment.go Dump github/gitlab/gitea repository data to a local directory and restore to gitea (#12244) 2020-12-27 11:34:19 +08:00
downloader.go Add support to migrate from gogs (#14342) 2021-01-21 20:33:58 +01:00
error.go Add support to migrate from gogs (#14342) 2021-01-21 20:33:58 +01:00
issue.go Dump github/gitlab/gitea repository data to a local directory and restore to gitea (#12244) 2020-12-27 11:34:19 +08:00
label.go Improve migrations to support migrating milestones/labels/issues/comments/pullrequests (#6290) 2019-05-07 09:12:51 +08:00
milestone.go Add support to migrate from gogs (#14342) 2021-01-21 20:33:58 +01:00
null_downloader.go Add support to migrate from gogs (#14342) 2021-01-21 20:33:58 +01:00
options.go Encrypt migration credentials at rest (#15895) (#16187) 2021-06-17 22:59:28 +02:00
pullrequest.go Dump github/gitlab/gitea repository data to a local directory and restore to gitea (#12244) 2020-12-27 11:34:19 +08:00
reaction.go Dump github/gitlab/gitea repository data to a local directory and restore to gitea (#12244) 2020-12-27 11:34:19 +08:00
release.go Dump github/gitlab/gitea repository data to a local directory and restore to gitea (#12244) 2020-12-27 11:34:19 +08:00
repo.go Dump github/gitlab/gitea repository data to a local directory and restore to gitea (#12244) 2020-12-27 11:34:19 +08:00
retry_downloader.go Add support to migrate from gogs (#14342) 2021-01-21 20:33:58 +01:00
review.go Dump github/gitlab/gitea repository data to a local directory and restore to gitea (#12244) 2020-12-27 11:34:19 +08:00
uploader.go Dump github/gitlab/gitea repository data to a local directory and restore to gitea (#12244) 2020-12-27 11:34:19 +08:00