upvote
Ah sorry, didn't realize they had their own policy. This is a little stronger, but you can certainly still use an LLM to search for vulnerabilities, you would just need to write fixes yourself and mention if you used an LLM for assistance.

The rule you quoted is about code reviews, they don't want you using an LLM to write reviews or leave comments.

This is a pretty poorly written policy to be honest, so I understand if you interpret it to mean "no LLMs in any capacity", but I think if that's what they meant they would have said that. In fact they explicitly allow content "made with the help of AI", you just have to disclose it.

reply
Their definition of vibe coding is pretty whacky.

>Vibe coding is the practice where AI creates a code change (feature, bug fix, tests, refactor) with a human that describes what needs to be implemented.

So if you let an AI prompt another AI without human input, that's not vibe coding? Meanwhile if you prompt the model with pseudo code you've written or code written in another programming language to translate into the target language, that's vibe coding?

>It is not allowed to use AI in an autonomous-looking way to contribute in Forgejo.

They used the word "in", meaning it could refer to organizational membership, their repo or theoretically any instance of Forgejo, including self hosted ones. They failed to specify what part of Forgejo or the definition of Forgejo they meant.

Overall this is a pretty poorly written document and when you think about it, it doesn't really matter how poorly written it is when they are basically 100% against AI.

reply
> Forgejo disallows LLM contributions

You're misreading the rule.

>> 5. Using general AI for review is forbidden.

The second sentence makes it even clearer, as it would have been unnecessary under a blanket ban scenario

>> ... If the change contains changes to the UX it has to be approved by a human reviewer.

reply
This looks unambiguous to me:

  > Forgejo does not accept works of authorship (code, documentation, etc.) either partially or completely generated by AI due to legal uncertainties.
reply
Using AI to find a vulnerability is not a work of authorship. Using the AI generated text as your bug report would be, but if you use AI to find a bug, then write up a report yourself, I think that would be fine.
reply
>If the change contains changes to the UX it has to be approved by a human reviewer.

Would that not imply that a change that does not effect the UX does not have to be approved by a human reviewer? Otherwise, why specifically call out "changes to the UX" and not say "all changes"?

reply