Move the module path to git.colibrisec.org #4

Merged

james merged 1 commit from module-path into main

2026-10-08 15:17:09 +00:00

james commented

2026-10-08 15:15:47 +00:00

Owner

The repository lives at git.colibrisec.org/colibrisec/centinela, but the module still declared github.com/colibrisec/centinela. This renames the module in go.mod and every internal import to match where the code is hosted.

18 files, import paths only; no behaviour change.
Third-party dependencies (Coraza and its transitive modules) are untouched.
make vet, make build, make eval and make test pass under the new path.

Independent of #3: the two touch different lines and can merge in either order.

Merging to main runs build-and-push, which tags and publishes the next patch version.

The repository lives at `git.colibrisec.org/colibrisec/centinela`, but the module still declared `github.com/colibrisec/centinela`. This renames the module in `go.mod` and every internal import to match where the code is hosted. - 18 files, import paths only; no behaviour change. - Third-party dependencies (Coraza and its transitive modules) are untouched. - `make vet`, `make build`, `make eval` and `make test` pass under the new path. Independent of #3: the two touch different lines and can merge in either order. Merging to `main` runs `build-and-push`, which tags and publishes the next patch version.

james added 1 commit

2026-10-08 15:15:47 +00:00

Move the module path to git.colibrisec.org

security-scan / security-scan (pull_request) Successful in 27s

Details

test / go (pull_request) Successful in 5m30s

Details

80f5e8adda

The repository lives at git.colibrisec.org/colibrisec/centinela, but the
module still declared github.com/colibrisec/centinela, where it has
never been published. Rename the module and every internal import to
match where the code is hosted.

Third-party dependencies are untouched.

forgejo-actions commented

2026-10-08 15:16:10 +00:00

🔎 ojo scan results

Severity	Count
🟠 HIGH	1
🟢 LOW	1

Details (2)

Type	Severity	ID/Rule	Location	Description
vuln	🟠 HIGH	CVE-2026-41510	github.com/corazawaf/coraza/[email protected]	Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding
misconfig	🟢 LOW	dockerfile-no-healthcheck	Dockerfile:1	image has no HEALTHCHECK

### 🔎 ojo scan results | Severity | Count | |---|---| | 🟠 HIGH | 1 | | 🟢 LOW | 1 | <details><summary>Details (2)</summary> | Type | Severity | ID/Rule | Location | Description | |---|---|---|---|---| | vuln | 🟠 HIGH | <a href="https://github.com/corazawaf/coraza/security/advisories/GHSA-6r3q-mjv7-xr8m" target="_blank" rel="noopener noreferrer">CVE-2026-41510</a> | github.com/corazawaf/coraza/[email protected] | Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding | | misconfig | 🟢 LOW | dockerfile-no-healthcheck | <a href="https://git.colibrisec.org/ColibriSec/centinela/src/commit/80f5e8adda90b5f49b813be78e7caad121a0f43b/Dockerfile#L1" target="_blank" rel="noopener noreferrer">Dockerfile:1</a> | image has no HEALTHCHECK | </details>

james merged commit 92c02f6b21 into main

2026-10-08 15:17:09 +00:00

james deleted branch module-path

2026-10-08 15:17:11 +00:00

james referenced this pull request from a commit

2026-10-08 15:17:11 +00:00

Merge pull request 'Move the module path to git.colibrisec.org' (#4) from module-path into main