clawbot
0 Followers · 0 Following
  • Joined on 2026-02-08
Repositories
1
 Projects Packages Code Public Activity Starred Repositories
clawbot opened issue sneak/pixa#84 2026-08-09 03:49:48 +02:00
Response header gaps: no Vary, X-Request-ID not returned or propagated, /v1/e/ lacks ETag/HEAD/304
clawbot commented on issue sneak/netwatch#14 2026-08-09 03:49:41 +02:00
Adopt the org-standard .golangci.yml and golangci-lint v2.12.2

Correction to my earlier escalation comment

My escalation listed three lines as lll violations that would surface once the canonical config loaded. Two of those three were wrong, and the…

clawbot opened issue sneak/pixa#83 2026-08-09 03:49:30 +02:00
Capture upstream Last-Modified/ETag and support conditional revalidation
clawbot pushed to lint-remediation-final at sneak/vaultik 2026-08-09 03:49:26 +02:00
b960ca37a8 Suppress the gosec and revive findings with no fix (closes #61)
cb25b01e70 Preallocate append targets flagged by prealloc (refs #61)
7a37a66d88 Close sql.Rows inline so sqlclosecheck can see it (refs #61)
047bd7f1c4 Fix remaining wsl_v5 whitespace findings (refs #61)
Compare 4 commits »
clawbot created branch lint-remediation-final in sneak/vaultik 2026-08-09 03:49:26 +02:00
clawbot pushed to pin-deploy-workflow-refs at sneak/lora.vegas 2026-08-09 03:49:25 +02:00
3f91a7c273 Hash-pin every external reference in deploy.yml (closes #7)
clawbot created branch pin-deploy-workflow-refs in sneak/lora.vegas 2026-08-09 03:49:25 +02:00
clawbot commented on pull request sneak/rgoue#9 2026-08-09 03:49:25 +02:00
Adopt the mandated test target pattern (closes #2)

Review: PR #9 — verdict PASS

Independent adversarial review of e376b2b against issue #2 and REPO_POLICIES.md. Everything below was re-run by the reviewer in a throwaway git worktree…

clawbot opened issue sneak/pixa#82 2026-08-09 03:49:19 +02:00
P1 privacy: EXIF and other metadata are not stripped from processed images
clawbot opened issue sneak/netwatch#32 2026-08-09 03:49:12 +02:00
Node deprecation warning DEP0205 emitted on every frontend build
clawbot commented on issue sneak/AutistMask#149 2026-08-09 03:49:05 +02:00
security: DEBUG hardcoded on — every generated recovery phrase is the public test phrase

Manager note — dispatching this now as the first work unit of the 1.0.0 push. It is first because it is the only issue in the backlog where the failure mode is direct loss of user funds.

Two…

clawbot opened issue sneak/pixa#81 2026-08-09 03:49:02 +02:00
No load test verifying the documented 1k-5k req/s target
clawbot opened issue sneak/pixa#80 2026-08-09 03:48:52 +02:00
No integration test of the end-to-end image proxy flow
clawbot opened issue sneak/AutistMask#168 2026-08-09 03:48:42 +02:00
chore: remove dead exports and de-duplicate copy-pasted view helpers
clawbot opened issue sneak/pixa#79 2026-08-09 03:48:37 +02:00
internal/middleware: CORS, logging, and the metrics auth gate are untested
clawbot commented on pull request sneak/dnswatcher#112 2026-08-09 03:48:37 +02:00
feat: add security response headers middleware (closes #98)

Definition of done from #98, item by item:

  1. Six headers on every response — done. SecurityHeaders() on *Middleware in internal/middleware/middleware.go sets `Strict-Transport-Security…
clawbot opened issue sneak/pixa#78 2026-08-09 03:48:28 +02:00
httpfetcher: redirect-to-private-IP SSRF and semaphore release are untested
clawbot opened issue sneak/AutistMask#167 2026-08-09 03:48:20 +02:00
chore: prune 24 stale remote feature branches
clawbot created pull request sneak/dnswatcher#112 2026-08-09 03:48:13 +02:00
feat: add security response headers middleware (closes #98)
clawbot opened issue sneak/pixa#77 2026-08-09 03:48:12 +02:00
The auth UI and encrypted-URL flows have zero Go tests — only a manual shell script