
What I found missing on Codeberg as a new user
I recently started moving my maintained projects from GitHub to Codeberg. Along the way, I collected a few notes on the problems I encountered feature-wise. This is in no way meant to complain about Forgejo (or Codeberg), but maybe it will help get those remaining issues solved, and if so it serves a purpose. Please correct me if I’ve missed something. For most of these, there are existing issues though. Table of Contents Tokens never expire and aren’t repo-scoped Can’t delete workflow runs from UI Can’t share workflows across repos Local reusable workflows are buggy No keyless artifact signing Web UI can’t sign merge commits No SLSA Level 3 supply chain security No full OpenSSF Scorecard support No centralized security findings dashboard No automatic vulnerable dependency blocking Artifact upload/download actions broken 1. Tokens never expire and aren’t repo-scoped GitHub fine-grained tokens:


