forgejo/models/fixtures/action_runner.yml

-
  # A global runner
  # Secret is 7e577e577e577e57feedfacefeedfacefeedface
  id: 12345678
  uuid: "37653537-3765-3537-3765-353737653537"
  name: "test"
  version: ""
  owner_id: 0
  repo_id: 0
  description: ""
  base: 0
  repo_range: ""
  token_hash: "3af8a56b850dba8848044385fedcfa4d9432e17de9f9803e4d279991394ac2945066ceb9a5e7cbe60a087d90d4bad03a8f9b"
  token_salt: "832f8529db6151a1c3c605dd7570b58f"
  last_online: 0
  last_active: 0
  agent_labels: '[""]'
  created: 1716104432
  updated: 1716104432
  deleted: ~
fix(actions): prevent deleted records' UUID from colliding with new records (#3830) This commit changes the code that deletes a runner so it updates the UUID before deleting the record. The new UUID is set to 8 0xff bytes followed by a little endian version of the record's numeric ID. Such UUIDs cannot be created from tokens when registering runners, as the first 16 bytes of the token are in the `[0-9a-f]` range. This should prevent deleted runners from colliding with new records if the tokens share the same first 16 characters. It is a possible solution to issue #3828 Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/3830 Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org> Co-authored-by: Emmanuel BENOÎT <tseeker@nocternity.net> Co-committed-by: Emmanuel BENOÎT <tseeker@nocternity.net> 2024-05-19 12:46:15 +02:00			`-`
			`# A global runner`
			`# Secret is 7e577e577e577e57feedfacefeedfacefeedface`
			`id: 12345678`
			`uuid: "37653537-3765-3537-3765-353737653537"`
			`name: "test"`
			`version: ""`
			`owner_id: 0`
			`repo_id: 0`
			`description: ""`
			`base: 0`
			`repo_range: ""`
			`token_hash: "3af8a56b850dba8848044385fedcfa4d9432e17de9f9803e4d279991394ac2945066ceb9a5e7cbe60a087d90d4bad03a8f9b"`
			`token_salt: "832f8529db6151a1c3c605dd7570b58f"`
			`last_online: 0`
			`last_active: 0`
			`agent_labels: '[""]'`
			`created: 1716104432`
			`updated: 1716104432`
			`deleted: ~`