Skip to content

Support multiple public Git hosts #8

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
erinepshovel-code merged 2 commits into from
Sep 14, 2026
+33 −6
Merged

Support multiple public Git hosts #8

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
64f68c4
Support allowlisted public Git hosts
erinepshovel-code Sep 14, 2026
0220314
Describe supported Git hosts
erinepshovel-code Sep 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions index.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,7 @@
</head>
<body>
<h1>Repository Audit</h1>
<p class="meta">Supports public GitHub, GitLab, Bitbucket, Codeberg, and SourceHut repositories.</p>

<input id="repo" placeholder="https://github.com/owner/repo.git">
<button id="audit">Audit</button>
Expand Down
38 changes: 32 additions & 6 deletions service.py
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,6 @@
import base64
import json
import os
import re
import subprocess
import tempfile
from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
Expand All @@ -11,16 +10,43 @@

from pubskill_lib.audit import audit_path

REPO = re.compile(r"^https://github\.com/[^/]+/[^/]+(?:\.git)?$")
ALLOWED_GIT_HOSTS = {
"github.com",
"gitlab.com",
"bitbucket.org",
"codeberg.org",
"git.sr.ht",
}
PAYMENT_LINK_ID = "plink_1UFLuMAyiOEDWiRnLUiYEx3Y"
PAYMENT_LINK_URL = "https://buy.stripe.com/14A6oG5Sk9MWg8z3UO5EY01"
PRICE_CENTS = 1900
FREE_FINDINGS = 3


def valid_repo_url(value):
try:
parsed = urlsplit(value)
port = parsed.port
except (TypeError, ValueError):
return False

parts = [part for part in parsed.path.split("/") if part]
return (
parsed.scheme == "https"
and parsed.hostname in ALLOWED_GIT_HOSTS
and parsed.username is None
and parsed.password is None
and port is None
and not parsed.query
and not parsed.fragment
and len(parts) >= 2
and ".." not in parts
)


def run_audit(repo_url):
if not REPO.fullmatch(repo_url):
raise ValueError("public github.com repository required")
if not valid_repo_url(repo_url):
raise ValueError("supported public Git repository required")

with tempfile.TemporaryDirectory() as tmp:
target = os.path.join(tmp, "repo")
Expand Down Expand Up @@ -59,10 +85,10 @@ def paid_repo(session):
for field in session.get("custom_fields") or []:
if field.get("key") == "githubrepo" and field.get("type") == "text":
repo_url = (field.get("text") or {}).get("value", "").strip()
if REPO.fullmatch(repo_url):
if valid_repo_url(repo_url):
return repo_url

raise ValueError("paid checkout is missing a valid GitHub repository URL")
raise ValueError("paid checkout is missing a valid supported Git repository URL")


class Handler(BaseHTTPRequestHandler):
Expand Down