From 92dc59584be02137c7a1b40769bda0f522396086 Mon Sep 17 00:00:00 2001 From: Fredrik Johansson Date: Mon, 20 Jul 2026 21:09:04 +0200 Subject: [PATCH] Make Git repository scanning opt-in --- .env.example | 5 +++-- README.md | 4 +++- docker-compose.yml | 1 - 3 files changed, 6 insertions(+), 4 deletions(-) diff --git a/.env.example b/.env.example index 0b6f308..27595e4 100644 --- a/.env.example +++ b/.env.example @@ -2,5 +2,6 @@ PORT=3082 TRACE_PASSWORD=replace-me # Project-scoped ingestion credentials: project:token pairs. TRACE_RECEIPT_TOKENS=goonk:replace-with-a-long-random-token -# Comma-separated id:absolute-path pairs. Mount paths read-only in Docker. -TRACE_REPOS=goonk:/repos/goonk,flit:/repos/flit +# Optional: comma-separated id:absolute-path pairs for deliberately mounted +# read-only repository mirrors. Leave empty when production has no Git repos. +TRACE_REPOS= diff --git a/README.md b/README.md index f025557..04d4dfa 100644 --- a/README.md +++ b/README.md @@ -7,7 +7,9 @@ cp .env.example .env npm start ``` -Node 24+, no runtime dependencies. Uses built-in `node:sqlite`. Set `TRACE_PASSWORD`; configure read-only repositories through `TRACE_REPOS`. Nothing publishes automatically: export creates a draft under `data/exports/` for manual review. +Node 24+, no runtime dependencies. Uses built-in `node:sqlite`. Set `TRACE_PASSWORD`. Nothing publishes automatically: export creates a draft under `data/exports/` for manual review. + +Git candidate scanning is optional and disabled by default. If an installation deliberately mounts read-only repository mirrors, list their container paths in `TRACE_REPOS`; production receipt ingestion does not require repository access. ## Deployment receipts v1 diff --git a/docker-compose.yml b/docker-compose.yml index d7aa682..d08134e 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -8,6 +8,5 @@ services: ports: ["${HOST_PORT:-3082}:3082"] volumes: - trace-data:/app/data - - ../goonk:/repos/goonk:ro volumes: trace-data: