Repository Issue Activity (beta)

#932 Repos accidentally exposed publicly

#928 After update everything is gone - how to recover?

#756 Read-only, public-only web interface

#393 Support ssh-certificates

#681 soft serve 0.8.4 on windows host not navigating folders in repo correctly

#510 Copy command duplicating repositories in list

#645 No error or warnings when soft cannot bind to privileged ports (Debian 12)

#909 Custom global pre-receive hook's exit code is discarded, so it can never reject a push

#634 Support non-root README path

#758 Config could support anon_access and allow_keyless settings.

#803 fix(jobs): mirror sync killed by 1-minute default timeout, leaving repos in broken state

#912 Smart HTTP clones are much slower due to tiny flushes and gzip

#797 Orphaned Processes

#891 soft serve doesn't reap child git processes, causing zombie accumulation

#896 Collab user with read-write can delete the whole repository

#881 Example server is down

#882 Why is the Dockerfile not building the package first?

#880 Regression: cannot create webhooks targeting internal services after SSRF fix

#670 Support direct Tailscale listening via tsnet

#865 security: prioritized remediation plan - plaintext passwords, SQL injection, path traversal

#863 fix: comprehensive security and correctness fixes - round 59

#862 security(web): path traversal vulnerability and missing input validation

#860 fix(web): path traversal, JWT token expiration handling, input validation - round 58

#858 fix: review round 57 - findings already fixed in previous rounds

#856 fix(web): JWT claims missing validation - round 56