I’m looking for a forgejo cli (something similar to gh for github or glab for gitlab - neither of which I’ve ever used).

I found one named forgejo-cli and another named fgj but, from a quick look at the source, both seem to save my API key in a plaintext file, which… I just find unacceptable (and, frankly, quite dumb).

Do you know of any others?

  • FizzyOrange@programming.dev
    link
    fedilink
    arrow-up
    1
    ·
    3 hours ago

    Interesting how do you do that exactly?

    I was thinking you can just start the app that has permission to read the wallet, attach a debugger and then inject code to dump the wallet. It’s definitely more complicated than reading a plain text file but not fundamentally less possible.

    But really if you have that level of access it’s game over anyway and you just MitM sudo and get root access, or use one of the many local privilege escalation vulnerabilities and get root immediately.