Re: Forbidden requests for kernel.org/releases.json

On Mon, Oct 13, 2025 at 11:19:55AM -0400, Theodore Ts'o wrote:
> Konstantin,
> 
> I wonder to the AI bot protection versus CI tools that need to
> periodicaly track git trees so we can do tests would be to set up a
> read-only gitolite account?  This could be using the ra.kernel.org, or
> it could be a secondary server, since we only need read-only access.
> 
> If each CI builder has their own ssh key, you'll be able to track if a
> particular account is being too abusive in terms of load on the git server.

Alternatively to SSH keys, would client-side TLS certs be lower
complexity to implement?

-- 
Kees Cook