Issues

• LFS import/mirror never downloads the last partial batch (<20) of objects

  charmbracelet/soft-serve#937 · Filter by author breken-ai opened on Oct 8, 2026

• repo import hangs forever when the clone fails

  charmbracelet/soft-serve#936 · Filter by author breken-ai opened on Oct 8, 2026

• Bummer missing repo on git.charm.sh

  charmbracelet/soft-serve#935 · Filter by author rahji opened on Oct 4, 2026

• Repos accidentally exposed publicly

  charmbracelet/soft-serve#932 · Filter by author cedws opened on Sep 8, 2026
  1

• After update everything is gone - how to recover?

  charmbracelet/soft-serve#928 · Filter by author muchgitsuchwow opened on Aug 13, 2026

• Collab user with read-write can delete the whole repository

  charmbracelet/soft-serve#896 · Filter by author helmut72 opened on Jun 4, 2026

• soft serve doesn't reap child git processes, causing zombie accumulation

  charmbracelet/soft-serve#891 · Filter by author eznix86 opened on May 24, 2026
  4

• Why is the Dockerfile not building the package first?

  charmbracelet/soft-serve#882 · Filter by author jon-zuka opened on Apr 29, 2026
  1

• Regression: cannot create webhooks targeting internal services after SSRF fix

  charmbracelet/soft-serve#880 · Filter by author tandiljuan opened on Apr 28, 2026
  5

• security: prioritized remediation plan - plaintext passwords, SQL injection, path traversal

  charmbracelet/soft-serve#865 · Filter by author dvrd opened on Mar 29, 2026
  1

• fix: comprehensive security and correctness fixes - round 59

  charmbracelet/soft-serve#863 · Filter by author dvrd opened on Mar 29, 2026

• security(web): path traversal vulnerability and missing input validation

  charmbracelet/soft-serve#862 · Filter by author dvrd opened on Mar 29, 2026

• fix(web): path traversal, JWT token expiration handling, input validation - round 58

  charmbracelet/soft-serve#860 · Filter by author dvrd opened on Mar 29, 2026

• fix: review round 57 - findings already fixed in previous rounds

  charmbracelet/soft-serve#858 · Filter by author dvrd opened on Mar 29, 2026

• fix(web): JWT claims missing validation - round 56

  charmbracelet/soft-serve#856 · Filter by author dvrd opened on Mar 29, 2026

• fix(server): bind errors on privileged ports silently swallowed — server appears started but SSH/HTTP never bind

  charmbracelet/soft-serve#805 · Filter by author dvrd opened on Mar 28, 2026
  1

• access tokens don't provide authentication

  charmbracelet/soft-serve#800 · Filter by author ByteSizedMarius opened on Mar 21, 2026
  2

• Orphaned Processes

  charmbracelet/soft-serve#797 · Filter by author jthorpe6 opened on Mar 15, 2026
  1

• testscript fails on i686

  charmbracelet/soft-serve#781 · Filter by author newbluemoon opened on Feb 3, 2026
  2

• SSH identity changes on restart when ssh.key_path is set

  charmbracelet/soft-serve#779 · Filter by author giorgiga opened on Jan 31, 2026

• Mirroring a large repo pegs cpu at 100% for a long time

  charmbracelet/soft-serve#777 · Filter by author giorgiga opened on Jan 23, 2026

• [Feature Request] Provide a method to disable a cron job

  feature

  charmbracelet/soft-serve#773 · Filter by author linsein opened on Jan 9, 2026
  1

• LFS upload reports errors related to locking, either of the database (when using HTTP) or of the files itself

  bug

  charmbracelet/soft-serve#770 · Filter by author rgomezc opened on Dec 29, 2025
  3

• Copy clone command when viewing repository

  feature

  charmbracelet/soft-serve#769 · Filter by author phardy opened on Dec 29, 2025
  1

• Read-only, public-only web interface

  charmbracelet/soft-serve#756 · Filter by author Amolith opened on Oct 7, 2025
  9