A host named in FORGE_ORIGIN_ALLOW can be mirrored as well as connected: its origin's git trusts it by name, as FORGE_OUTBOUND_TRUSTED_HOSTS does
Some checks are pending
preview / preview (pull_request) Blocked by required conditions
An account that can only read an origin repository proposes through its own fork there, and a protected repository is always proposed to that way
Some checks are pending
preview / preview (pull_request) Blocked by required conditions
On a host the operator names, an origin is refused when its account administers the instance or can push to a protected repository
Some checks are pending
preview / preview (pull_request) Blocked by required conditions
Connecting a token that lacks a scope names the scope, and the token form lists what a token needs
Some checks are pending
preview / preview (pull_request) Blocked by required conditions
The connect flow page goes on only to the authorize URL stored on the flow, so a crafted link cannot choose the client or the callback
Some checks are pending
preview / preview (pull_request) Blocked by required conditions
Inside an Actions job the gate reads bun's ::group:: file header, so a file red only beside others is run again alone
Some checks are pending
preview / preview (pull_request) Blocked by required conditions