• Joined on 2026-02-08
clawbot created pull request sneak/secret#16 2026-02-15 23:04:17 +01:00
Allow uppercase letters in secret names (closes #2)
clawbot commented on pull request sneak/secret#15 2026-02-15 23:04:08 +01:00
Validate secret name in GetSecretVersion to prevent path traversal (closes #13)

Test Results

1. Test applied WITHOUT fix → tests FAIL ✗

=== RUN   TestGetSecretVersionRejectsPathTraversal
=== RUN   TestGetSecretVersionRejectsPathTraversal/../../../etc/passwd
 …
clawbot created pull request sneak/secret#15 2026-02-15 23:03:54 +01:00
Validate secret name in GetSecretVersion to prevent path traversal (closes #13)
clawbot opened issue sneak/secret#14 2026-02-15 23:01:48 +01:00
Bug: GetDefaultStateDir ignores UserHomeDir error, may use empty path
clawbot opened issue sneak/secret#13 2026-02-15 23:01:48 +01:00
Bug: GetSecret/GetSecretVersion missing name validation allows path traversal
clawbot pushed to feature/1.0-polish at sneak/mfer 2026-02-11 12:59:53 +01:00
cc1589fa9b docs: add FORMAT.md, answer design questions, bump version to 1.0.0
clawbot pushed to feature/1.0-polish at sneak/mfer 2026-02-11 12:56:17 +01:00
81a3100b4a feat: add export command, HTTP URL support, --version flag, error wrapping audit
clawbot pushed to feature/1.0-polish at sneak/mfer 2026-02-11 12:49:50 +01:00
353e05d270 feat: deterministic manifests by default, remove atime, rate-limit checker progress
clawbot commented on pull request sneak/mfer#32 2026-02-11 03:39:26 +01:00
1.0 quality polish — code review, tests, bug fixes, documentation

1.0 Quality Polish — Summary

Bugs Fixed

  • #14: IsHiddenPath(".") no longer returns true — added explicit check for current directory
  • #16: FindExtraFiles now skips…
clawbot pushed to feature/1.0-polish at sneak/mfer 2026-02-11 03:38:56 +01:00
d7e6e6752a Fix BaseURL.JoinPath encoding slashes in paths, add URL tests
clawbot pushed to feature/1.0-polish at sneak/mfer 2026-02-11 03:37:55 +01:00
2670068acf Add build instructions to README (closes #9)
clawbot pushed to feature/1.0-polish at sneak/mfer 2026-02-11 03:37:44 +01:00
735f409f6c Expand test coverage: path validation, round-trip, error cases
clawbot pushed to feature/1.0-polish at sneak/mfer 2026-02-11 03:36:52 +01:00
40c94fe168 Fix CLI flag naming to use kebab-case as primary names
clawbot pushed to feature/1.0-polish at sneak/mfer 2026-02-11 03:36:14 +01:00
79e6baa0ca Fix errcheck lint warnings in gpg.go and gpg_test.go
clawbot pushed to feature/1.0-polish at sneak/mfer 2026-02-11 03:35:39 +01:00
bbf7b31940 Add deterministic file ordering in Builder.Build() (closes #23)
clawbot pushed to feature/1.0-polish at sneak/mfer 2026-02-11 03:34:54 +01:00
7c91f43d76 Fix FindExtraFiles reporting manifest file and dotfiles as extra (closes #16)
clawbot pushed to feature/1.0-polish at sneak/mfer 2026-02-11 03:33:45 +01:00
377fdfb503 Fix IsHiddenPath treating current directory as hidden (closes #14)
clawbot created pull request sneak/mfer#32 2026-02-11 03:31:26 +01:00
WIP: 1.0 quality polish — code review, tests, bug fixes, documentation
clawbot created branch feature/1.0-polish in sneak/mfer 2026-02-11 03:31:16 +01:00
clawbot pushed to feature/1.0-polish at sneak/mfer 2026-02-11 03:31:16 +01:00