Go to file
Mike Frysinger 40252c20f7 RepoHook: allow users to approve hooks via manifests
The constant prompting when registered hooks change can be tedious and
has a large multiplication factor when the project is large (e.g. the
AOSP).  It gets worse as people want to write more checks, hooks, docs,
and tests (or fix bugs), but every CL that goes in will trigger a new
prompt to approve.

Let's tweak our trust model when it comes to hooks.  Since people start
off by calling `repo init` with a URL to a manifest, and that manifest
defines all the hooks, anchor trust in that.  This requires that we get
the manifest over a trusted link (e.g. https or ssh) so that it can't
be MITM-ed.  If the user chooses to use an untrusted link (e.g. git or
http), then we'll fallback to the existing hash based approval.

Bug: Issue 226
Change-Id: I77be9e4397383f264fcdaefb582e345ea4069a13
2016-08-16 13:02:52 -04:00
docs Improve documentation of manifest server RPC methods 2016-04-13 17:55:36 +09:00
hooks Update commit-msg hook to version from Gerrit 2.12.1 2016-03-14 10:08:33 +09:00
subcmds RepoHook: allow users to approve hooks via manifests 2016-08-16 13:02:52 -04:00
tests Fix gitc-init behavior 2015-10-07 15:43:22 -07:00
.gitattributes Adds additional crlf clobber avoidance. 2016-06-22 08:36:45 +00:00
.gitignore Add repoc to the .gitignore file 2013-03-08 01:18:08 +00:00
.mailmap Add a .mailmap file 2016-04-18 19:08:23 +09:00
.project Set correct name in PyDev and Eclipse project config 2013-04-19 09:35:43 +09:00
.pydevproject Set correct name in PyDev and Eclipse project config 2013-04-19 09:35:43 +09:00
.pylintrc pylint: ignore bad-whitespace 2016-06-17 16:37:24 -07:00
color.py Pylint and PEP8 fixes for color.py 2015-03-28 21:12:27 +00:00
command.py repo: Repo does not always handle '.' parameter correctly 2016-04-08 00:07:52 +00:00
COPYING Initial Contribution 2008-10-21 07:00:00 -07:00
editor.py Change print statements to work in python3 2012-11-13 17:33:56 -08:00
error.py error: fix typos 2015-06-04 00:21:16 +00:00
git_command.py Add rpc: to default protocol whitelist 2016-02-26 18:53:54 -08:00
git_config.py Support smart-sync through persistent-http[s] 2015-08-19 10:22:11 -07:00
git_refs.py Fix some python3 encoding issues 2013-11-21 06:03:22 +00:00
git_ssh Don't allow git fetch to start ControlMaster 2010-10-29 08:15:14 -07:00
gitc_utils.py Bail out when manifest is referencing a bad SHA-1 revision. 2016-06-29 11:01:43 -07:00
main.py pylint: Fix unused-{argument,variable} warning 2016-06-21 11:48:57 -07:00
manifest_xml.py pylint: fix indentation in manifest_xml 2016-06-17 16:45:48 -07:00
pager.py Change print statements to work in python3 2012-11-13 17:33:56 -08:00
progress.py Support units in progress messages 2011-09-19 14:52:57 -07:00
project.py RepoHook: allow users to approve hooks via manifests 2016-08-16 13:02:52 -04:00
pyversion.py Move Python version checking to a separate module 2013-05-23 07:28:53 +00:00
repo Support non-ASCII GNUPGHOME environment variable 2016-07-16 22:10:06 +03:00
SUBMITTING_PATCHES SUBMITTING_PATCHES: Expand instructions 2016-02-17 02:45:08 +00:00
trace.py Change print statements to work in python3 2012-11-13 17:33:56 -08:00
wrapper.py Add wrapper module 2014-01-30 15:17:09 -08:00