Hacker News: techknowlogick

New comment by techknowlogick in "GitHub is investigating unauthorized access to their internal repositories"

techknowlogick — Wed, 20 May 2026 14:36:01 +0000

Thanks for saying so <3 If you ever run into any issues with it please feel free to report an issue or hop into chat.

New comment by techknowlogick in "GitHub is investigating unauthorized access to their internal repositories"

techknowlogick — Wed, 20 May 2026 14:35:03 +0000

I'm a project lead of Gitea, and former elected board member of Codeberg. Gitea remains opensource (feel free to check out the repo and you can see that the license remiains as is), and maintains yearly community elections. The codeberg board was informed a full year prior to their "we just found out blog post", and so "catching the whole community by surprise" is very much not accurate since they very much knew. As well, we (the company) were very public with our activities prior to our blog post announcing things, including working to support other open source projects migrate, and posting about it through various channels (social media, chat, etc..).

New comment by techknowlogick in "Leaving GitHub for Forgejo"

techknowlogick — Wed, 13 May 2026 21:15:44 +0000

I'm one of the project leads of Gitea (and am paid for some of my work on Gitea), and here are some more details around the specific incident you are talking about: We were alerted to an issue, and investigated provided a patch, and then waited until the end of the embargo to release the next version with the fix. It turns out they had sent a follow up after our response to them that, due to their usage of an email relay that gets blocked for spam often, went into the spam box for all of the maintainers on the security team (across multiple mail providers). We informed them of this and they still haven't corrected the record on their blog post. This is after previously giving us 10 and 2 day "embargoes" on "severe" issues and a multi-hundred line patch that rewrote core portions of the codebase and introduced issues in itself, we notified them of this and provided them with out patch. In our interactions with them we have also followed our documented approach, that we have followed with codeberg previously (that we were thanked and applauded), but they have changed their stance and claimed we are now acting improperly (and when we asked for how we could adjust our approach to something that works for their adjusted expectations we never received a response, even after receiving multiple emails from multiple non-company maintainers and even messages in multiple chatrooms).

Disclaimer: I was also previously an elected member of Codeberg's board (presidium), where before the company that was founded to support Gitea's community maintainers was created, I had asked for assistance with multiple matters to aid in project development and was denied.

New comment by techknowlogick in "Gitea Private, Fast, Reliable DevOps Platform"

techknowlogick — Wed, 23 Jul 2025 18:18:59 +0000

Not yet, but it is something that is being worked on.

New comment by techknowlogick in "Gitea Private, Fast, Reliable DevOps Platform"

techknowlogick — Wed, 23 Jul 2025 18:12:59 +0000

Gitea would have SAML too (I'm the main author on the SAML PR to the Gitea project), but it's been held up by community reviews requiring esentially an entire re-write with another library. We'd love some help to get it across the finish line :) In open-source, money isn't the only thing that can be spent; we can also use our time.

New comment by techknowlogick in "Gitea Private, Fast, Reliable DevOps Platform"

techknowlogick — Wed, 23 Jul 2025 18:12:07 +0000

Gitea has SSO using many different ways, such as LDAP, OAuth2/OIDC, OpenID, SMTP, etc.., and it would have SAML too (I'm the main author on the SAML PR to the Gitea project), but it's been held up by community reviews requiring esentially an entire re-write with another library. We'd love some help to get it across the finish line :) In open-source, money isn't the only thing that can be spent; we can also use our time.

New comment by techknowlogick in "Gitea Private, Fast, Reliable DevOps Platform"

techknowlogick — Wed, 23 Jul 2025 18:09:01 +0000

The difference between the Gitea project and the Gitea Enterprise software offering is with Gitea Enterprise we are able to include code written that was rejected by maintainers (eg. mandatory 2FA as an example) as there was still a desire for it. Luckily it was since rewritten in a way that was acceptable for the project and now it's been accepted/merged. The company has also written code that was under contract from other companies, and so they own the IP and thus cannot be accepted by the project due to not being able to be DCO compliant. Those companies are receptive to open-source, and we are working with their legal teams to be able to have them release their claim to the code so we can submit it to the project (large corpos are not known for their speed and understandably want to do their due diligence to ensure that all i's are dotted and t's crossed). There are around ~50 community maintainers that have exactly equal say over PR reviews, etc.., and that process has always been strictly adhered to.

Edit: Gitea has LDAP, OAuth2/OIDC, OpenID, SMTP, reverse proxy, and others as SSO options.

New comment by techknowlogick in "Gitea Private, Fast, Reliable DevOps Platform"

techknowlogick — Wed, 23 Jul 2025 03:17:39 +0000

Yes there are :) You can use the Package limit setting to change it (search the config docs for `LIMIT_SIZE_CONTAINER`), by default there is no limit, but if you are running into a 413 due to container uploads being so large, then it could be a reverse proxy configuration you might be running into.

New comment by techknowlogick in "Gitea Private, Fast, Reliable DevOps Platform"

techknowlogick — Wed, 23 Jul 2025 03:15:15 +0000

It does :) Gitea Actions are compatible with GitHub Actions. For the most part the same workflows you'd use on GitHub will work with Gitea.

New comment by techknowlogick in "Gitea Private, Fast, Reliable DevOps Platform"

techknowlogick — Wed, 23 Jul 2025 03:13:46 +0000

Yup, this is the case. I'm the main author on that PR. It sadly stalled due to reviews from other maintainers requiring it to be rewritten using another library, but hopefully I'll be able to get back to it, or someone else will be able to pick it up. We've been able to get other functionality into Gitea already, and I've personally funded maintainers and others' work for the project, which goes directly into the project itself.

New comment by techknowlogick in "Gitea Private, Fast, Reliable DevOps Platform"

techknowlogick — Wed, 23 Jul 2025 03:10:54 +0000

I'm the main author of the PR to implement SAML in Gitea, and it sadly has stalled due to reviews from maintainers requiring it to be rewritten entirely using another library. Our governance charter requires a certain process for PRs going into Gitea, and cannot be side-stepped by anyone. As for some of the others, we've been able to merge them in already.

New comment by techknowlogick in "Gitea Private, Fast, Reliable DevOps Platform"

techknowlogick — Wed, 23 Jul 2025 03:07:58 +0000

I'm not sure what you mean, as Gitea has SSO using many different ways, such as LDAP, OAuth2/OIDC, OpenID, SMTP, and more.

New comment by techknowlogick in "Gitea Private, Fast, Reliable DevOps Platform"

techknowlogick — Wed, 23 Jul 2025 00:41:23 +0000

Thanks :)

New comment by techknowlogick in "Gitea Private, Fast, Reliable DevOps Platform"

techknowlogick — Wed, 23 Jul 2025 00:39:12 +0000

Thank YOU for using it :)

New comment by techknowlogick in "Gitea Private, Fast, Reliable DevOps Platform"

techknowlogick — Wed, 23 Jul 2025 00:28:39 +0000

Thanks so much for saying so. Not sure if you are on the latest major release yet, but hopefully you've seen that resource usage is much lower and response times are even faster.

New comment by techknowlogick in "Gitea Private, Fast, Reliable DevOps Platform"

techknowlogick — Wed, 23 Jul 2025 00:20:46 +0000

Thanks so much for saying so :) If you ever need any help please don't hesitate to hop into our forum, chat or issues tracker

New comment by techknowlogick in "Gitea Private, Fast, Reliable DevOps Platform"

techknowlogick — Wed, 23 Jul 2025 00:15:29 +0000

The Gitea project is still community-driven and has the same yearly elections for leadership that has been around for close to a decade now :)

edit: Gitea is fully MIT and per our governance charter that cannot change

New comment by techknowlogick in "Gitea Private, Fast, Reliable DevOps Platform"

techknowlogick — Wed, 23 Jul 2025 00:14:30 +0000

We are shipping ~300 PRs monthly (plus more getting reviewed), so there are always new things :) I have a few big PRs for longstanding feature requests that should go in soon that I'm pretty excited for.

edit: Im also pretty excited about the anti-crawler enhancements that went in the latest major release

New comment by techknowlogick in "Gitea Private, Fast, Reliable DevOps Platform"

techknowlogick — Tue, 22 Jul 2025 23:58:58 +0000

Hey, I'm a part of the Gitea project leadership. Thanks for sharing. If you have any questions, please don't hesitate to ask :)

Rolling the ladder up behind us

techknowlogick — Fri, 20 Jun 2025 15:51:02 +0000

Article URL: https://xeiaso.net/blog/2025/rolling-ladder-behind-us/

Comments URL: https://news.ycombinator.com/item?id=44328894

Points: 206

# Comments: 201