Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Optional Support for Multi-Repository Deploy Keys #8034

qdladoooo started this conversation in Polls
Discussion options

In real-world scenarios, deploying multiple projects on a single server is very common. However, Gogs restricts a deploy key to be used by only one repository. This forces users into one of the following situations:

  1. Configure and manage multiple deploy keys.
  2. Set up a proxy user account and bind an SSH key.
  3. Directly use the server’s key as a user key.

All of this is just to prevent the low-probability risk of a "read-only deploy key leak." The result is that users are forced to either accept guaranteed inconvenience or face even greater risks.
It feels like Gogs has set up the "People’s Court" from The Dark Knight Rises.

a) By forbidding a deploy key from being reused, some choices actually become less secure.
b) Allowing multiple repositories to share a deploy key would still make it possible to apply the same security strategies.

Right now, everyone has to permanently pay the price for the scenario of "a user with no security awareness who accidentally leaks a single deploy key."

Heat death comes faster because of this decision.

Optional Support for Multi-Repository Deploy Keys
In Favor
57%
hateAgainst
42%

7 votes

You must be logged in to vote

Replies: 0 comments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
1 participant

AltStyle によって変換されたページ (->オリジナル) /