@vaporeon_ i block pushing directly to main and instead pull request small changes to it; i can’t find an actual git hook that runs on “when my forgejo instance merges to main” (post-merge did not trigger when i tried it, but the manpage says that is specifically when you run git pull anyway), but forgejo (and gitlab, fur that matter) DOES trigger a push events on main fur webhooks, so i set up a CGI handler on a port firewalled to only accessible from localhost to run the “git hook”