Skip to content
Runesmith Hub

Runesmith Hub

Gitea and Forgejo

RunesmithOfficial0.1.0

Gitea and Forgejo is unverified

Gitea and Forgejo hasn't been reviewed by Runesmith. Its code was checked automatically, but no person has read it. Plugins can access everything you can: your files, your projects and your accounts. Install it only if you trust Runesmith.

What it can do

  • Connects to the internet or other computers. Talks to the Gitea and Forgejo servers you add to sign you in and list repositories.
  • Stores or reads passwords and tokens. Keeps your Gitea and Forgejo sign-ins in your system's secret store.
  • Starts other programs. Opens your Gitea or Forgejo server in your browser to sign in.
  • Reads or writes files outside your project and its own storage. Remembers the accounts you added and caches avatars.
  • Reads environment variables, the registry or system settings. Reads a variable that points it at a test server during development.

Runesmith will warn you again before installing.

Sign in to gitea.com, Codeberg and other Gitea and Forgejo servers, clone from your accounts and open links.

State
Published
Review
Reviewed on 9 Oct 2026
Published
9 Oct 2026
Runs on
Plugin API 0.1.0 to below 0.2.0
Tag
v0.1.0 (2d12ae3)
Files
PackageSourceSBOM

Release notes

The first release of Gitea and Forgejo on the Runesmith Hub.

Tier

Official Published by Runesmith. Every version is read by an administrator before users get it.

Review

  • 0.1.0: Reviewed on 9 Oct 2026

Build provenance

Commit
2d12ae397b23
Reproducible
Two builds matched
Build
Build run with .NET SDK 10.0.401
Report
Build and analysis
Attestation
None yet
Contracts
RunesmithHub.Runesmith.Gitea.Contracts 0.1.0

Capabilities

  • Connects to the internet or other computers

    Talks to the Gitea and Forgejo servers you add to sign you in and list repositories.

    The analysis found code that uses it.

  • Stores or reads passwords and tokensHigh risk

    Keeps your Gitea and Forgejo sign-ins in your system's secret store.

    The analysis found code that uses it.

  • Starts other programsHigh risk

    Opens your Gitea or Forgejo server in your browser to sign in.

    The analysis found code that uses it.

  • Reads or writes files outside your project and its own storage

    Remembers the accounts you added and caches avatars.

    The analysis found code that uses it.

  • Reads environment variables, the registry or system settings

    Reads a variable that points it at a test server during development.

    The analysis found code that uses it.

Network hosts: gitea.com, codeberg.org, hosts you choose

Advisories

None.

Depends on

Nothing. It needs only Runesmith.

Used by

No plugins depend on it.