Skip to content

fix(trigger): prove checkout repository by host and path - #48

Merged
im-tyler merged 1 commit into
mainfrom
fix/repo-identity-transport
Oct 21, 2026
Merged

im-tyler merged 1 commit into
mainfrom
fix/repo-identity-transport

Conversation

@im-tyler

Copy link
Copy Markdown
Contributor

Self-hosted forges serve SSH and HTTP on different ports (Docker GitLab/Gitea/Forgejo default), so a CI checkout over ssh://git@h:2222/g/r never equalled the API's http://h:8080/g/r and native repository proof refused it.

verifyRepositoryMapping now compares host and path. The API authority stays pinned by TEPLOY_TRIGGER_API_BASE/TEPLOY_TRIGGER_FORGE; generic locators keep exact matching.

Test: TestRepositoryMappingIgnoresCheckoutTransport (same repo over SSH passes; other path or host refused).

Companion: teploy-dash source matching fix.

🤖 Generated with Claude Code

Self-hosted forges serve SSH and HTTP on different ports, so an SSH
checkout never equalled the API's HTTP clone URL. The API authority is
still pinned; only the locator spelling is relaxed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@im-tyler
im-tyler merged commit c18e8b2 into main Oct 21, 2026
1 check passed
@im-tyler
im-tyler deleted the fix/repo-identity-transport branch October 21, 2026 22:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant