OxygenHub andymccall's projects · #3
OxygenHub is the website for the next generation version control system (VCS), Oxygen.
Archived cards: off the board, kept and searchable. Back to the board
Backlog 20
-
Flow: say why a queued job waits, in oh and its check (#28)
andymccall/oxygenhub#132 · landed
archived
-
API: a wiki says it takes no proposals (#128)
andymccall/oxygenhub#133 · landed
archived
-
Close and reopen a proposal through the API and oh (#140)
andymccall/oxygenhub#149 · landed
archived
-
Backdrops on the pages touched in the polish batch
andymccall/oxygenhub#196 · closed
archived
-
Conflicts page is full width
andymccall/oxygenhub#195 · closed
archived
-
Wiki: a richer page layout
andymccall/oxygenhub#194 · closed
archived
-
Markdown editor: GitLab-style toolbar, preview and fullscreen
andymccall/oxygenhub#193 · closed
archived
-
Wiki: Clone this wiki command overruns its box
andymccall/oxygenhub#192 · closed
archived
-
Repository: choose a bookmark or tag without leaving the overview
andymccall/oxygenhub#191 · closed
archived
-
Proposal: Summarise with an assistant, posted as a comment
andymccall/oxygenhub#190 · closed
archived
-
Settings › Backups: Where and how often as wide as Runs
andymccall/oxygenhub#189 · closed
archived
-
Settings › Keys: cards of one width with a gap
andymccall/oxygenhub#188 · closed
archived
-
Profile: the year as a signal (contribution pulse)
andymccall/oxygenhub#217 · closed
archived
-
Users with their own runners can switch Flow on for their repositories
andymccall/oxygenhub#225 · closed
archived
-
Checks panel overflows with a long check summary
andymccall/oxygenhub#232 · closed
archived
-
A deploy restart cuts off requests in flight: drain them
andymccall/oxygenhub#233 · closed
archived
-
Assistants: no answer when a proposal sends the model too much
andymccall/oxygenhub#248 · closed
archived
-
oh issue comment takes only -b; proposal create takes -F FILE
andymccall/oxygenhub#260 · closed
archived
-
oh issue comment takes -F FILE (#260)
andymccall/oxygenhub#262 · landed
archived
-
Regression from #266: every metalgear2 fetch takes 14 s
andymccall/oxygenhub#271 · closed
archived
Done 68
-
A change that closes several issues closes only the first
andymccall/oxygenhub#226 · closed
archived
-
Security (critical): plain HTTP served without redirecting to HTTPS
andymccall/oxygenhub#218 · closed
archived
-
Security (high): SSRF through webhook and assistant URLs
andymccall/oxygenhub#219 · closed
archived
-
Security (medium): webhook responses have no size limit
andymccall/oxygenhub#220 · closed
archived
-
Security (medium): no login throttling
andymccall/oxygenhub#221 · closed
archived
-
Security (medium): baseline browser security headers
andymccall/oxygenhub#222 · closed
archived
-
Security (info): publish security.txt
andymccall/oxygenhub#224 · closed
archived
-
Security (low): sessions are long-lived and cannot be revoked one by one
andymccall/oxygenhub#223 · closed
archived
-
Diffusion: a landing does not refresh the consumer's pin index in production, so it shows behind with no bump
andymccall/oxygenhub#210 · closed
archived
-
Proposal changes list: state addresses in Diffusion bump titles run off the page
andymccall/oxygenhub#216 · closed
archived
-
Code button: show the Git clone command when the Git mirror is on
andymccall/oxygenhub#215 · closed
archived
-
Use an invitation to sign up with GitHub, GitLab or Google
andymccall/oxygenhub#214 · closed
archived
-
Live L1: event bus inside the hub
andymccall/oxygenhub#203 · closed
archived
-
Live L2: /live stream and the hub.js client
andymccall/oxygenhub#204 · closed
archived
-
Live L3: the proposal page updates itself
andymccall/oxygenhub#205 · closed
archived
-
A security contact page at /security-contact
andymccall/oxygenhub#230 · closed
archived
-
HSTS, staged: 5 minutes, then a week, then a year
andymccall/oxygenhub#231 · closed
archived
-
Sealed approvals: cryptographic proof of who approved a gated job
andymccall/oxygenhub#235 · closed
archived
-
A new hub hands administrator to whoever registers first
andymccall/oxygenhub#245 · closed
archived
-
Runners: Connectivity and Status columns, and a filterable queue
andymccall/oxygenhub#243 · closed
archived
-
Flaky: browse's create_push_and_browse clone fails 'unknown token' under the full suite
andymccall/oxygenhub#247 · closed
archived
-
Flow scheduling: priorities (site, org, team, repo, pipeline), expedited runs, and fair share between repositories
andymccall/oxygenhub#244 · closed
archived
-
negotiate on a large repository takes ~7 s per request; one client polling it keeps the hub busy
andymccall/oxygenhub#228 · closed
archived
-
A local cache for repositories kept in GCS (or S3): pages on them take seconds
andymccall/oxygenhub#234 · closed
archived
-
The hub holds 8.5 GB on Earth for 2.5 GB of repositories
andymccall/oxygenhub#246 · closed
archived
-
Standard exports: cosign-verifiable releases, in-toto/SLSA provenance in DSSE
andymccall/oxygenhub#239 · closed
archived
-
Approvals made with an agent token should say so (and may need to be refused)
andymccall/oxygenhub#229 · closed
archived
-
Follow a key rotation chain when checking who signed (approvals, seals)
andymccall/oxygenhub#236 · closed
archived
-
Terraform state backend for Flow runs
andymccall/oxygenhub#252 · closed
archived
-
Wikis: proposals, or oh says plainly they take none
andymccall/oxygenhub#128 · closed
archived
-
Live L4: dashboard and inbox live
andymccall/oxygenhub#206 · closed
archived
-
Live L5: issues, Diffusion tab and overview live
andymccall/oxygenhub#207 · closed
archived
-
oh sends an agent's grant token to the API, which refuses it
andymccall/oxygenhub#253 · closed
archived
-
Repository tab bar: an Artifacts menu and a More menu
andymccall/oxygenhub#254 · closed
archived
-
Terraform state: list, download and restore kept versions
andymccall/oxygenhub#255 · closed
archived
-
Terraform state readable with the Read role (any account, on public and internal repositories)
andymccall/oxygenhub#256 · closed
archived
-
Runner dashboard: live charts of jobs, pickup time and runners
andymccall/oxygenhub#257 · closed
archived
-
Slow pages: minified files' highlighting, and function history pages
andymccall/oxygenhub#249 · closed
archived
-
Landing: 'land when checks pass', and 'land now' over checks
andymccall/oxygenhub#261 · closed
archived
-
Agent tokens cannot decide approval gates unless the repository allows it
andymccall/oxygenhub#258 · closed
archived
-
Flow: say why a job waits when every runner that could take it is full or short of room
andymccall/oxygenhub#259 · closed
archived
-
Trusted timestamps for signatures (from the transparency log, or RFC 3161)
andymccall/oxygenhub#240 · closed
archived
-
Cancel a landed proposal's queued runs: they hold the queue ahead of the target's run
andymccall/oxygenhub#263 · closed
archived
-
Cancel a landed proposal's runs that have not started (#263)
andymccall/oxygenhub#264 · landed
archived
-
A bookmark attestation clients can't verify breaks every fetch of the repository (bomberman94: unknown key 1527a41c720a)
andymccall/oxygenhub#266 · closed
archived
-
Newest run wins: a new run cancels older live runs of the same bookmark or proposal
andymccall/oxygenhub#267 · closed
archived
-
Short-lived delegated keys for runners and agents from their OIDC identity ('keyless')
andymccall/oxygenhub#241 · closed
archived
-
Run the hub on PostgreSQL as well as SQLite
andymccall/oxygenhub#211 · closed
archived
-
Secret scanning: push protection and a history scan
andymccall/oxygenhub#268 · closed
archived
-
Roles: oxygenhub serve --role web,worker, with a leader lock for singleton tasks
andymccall/oxygenhub#272 · closed
archived
-
Event bus: publish/subscribe across hub processes (in-process and Postgres LISTEN/NOTIFY)
andymccall/oxygenhub#273 · closed
archived
-
Secret scanning: scan existing history, and revoke an allowed fingerprint
andymccall/oxygenhub#277 · closed
archived
-
Repository settings: a grouped sidebar with a page per setting
andymccall/oxygenhub#278 · closed
archived
-
Drops: per-user gists, each a small hidden Oxygen repository
andymccall/oxygenhub#279 · closed
archived
-
Settings › Security: balanced, every box the page's width
andymccall/oxygenhub#285 · closed
archived
-
Settings › Keys: when each linked key was last used
andymccall/oxygenhub#286 · closed
archived
-
Help: an AI identities section
andymccall/oxygenhub#287 · closed
archived
-
Admin: a grouped sidebar, one page per section
andymccall/oxygenhub#288 · closed
archived
-
Reuse a job's pass on an identical state instead of running it again (main after a landed proposal)
andymccall/oxygenhub#265 · closed
archived
-
Prometheus metrics: /metrics on the hub (and runners)
andymccall/oxygenhub#212 · closed
archived
-
One writer for the transparency log across hub processes
andymccall/oxygenhub#274 · closed
archived
-
Autoland and Diffusion: per-proposal cluster-wide locks
andymccall/oxygenhub#275 · closed
archived
-
Drops: backups, forks, stars, comments, embedding
andymccall/oxygenhub#280 · closed
archived
-
Linking the identity that delegates to the hub fails; New drop form narrower than its page
andymccall/oxygenhub#281 · closed
archived
-
Run page keeps "Waiting for a runner" under a job that has started
andymccall/oxygenhub#282 · closed
archived
-
Drop page: centred, and a clearer header
andymccall/oxygenhub#283 · closed
archived
-
Push without starting a run: [skip flow] in the change's message
andymccall/oxygenhub#284 · closed
archived
-
oh: move a board's cards in bulk (a whole column, with exceptions)
andymccall/oxygenhub#289 · closed
archived
Doing 2
-
Sign in with GitLab (gitlab.com and self-managed), and branded sign-in buttons
andymccall/oxygenhub#213 · closed
archived
-
Release the hub server (Linux x86_64, PostgreSQL) for the GCP image
andymccall/oxygenhub#242 · closed
archived
Keys: j/k move between cards, Enter opens one, m moves it to another column, / filters.