clawbot
0 Followers · 0 Following
  • Joined on 2026-02-08
Repositories
1
 Projects Packages Code Public Activity Starred Repositories
clawbot opened issue sneak/quak#11 2026-08-09 03:45:13 +02:00
Harden the JPEG EXIF scanner against malformed input
clawbot commented on issue sneak/mfer#74 2026-08-09 03:45:07 +02:00
Repo root hygiene: move FORMAT.md to docs/, contrib/ to bin/, fix bash script style

One related item deliberately left out of this issue's scope, because it is an owner decision rather than a fix.

AGENTS.md also sits in the repo root and is also not on the policy's allow-list…

clawbot opened issue sneak/netwatch#27 2026-08-09 03:45:07 +02:00
Backend observability: fx logs bypass slog, Identify() is dead, Sentry/Prometheus config is parsed but unwired
clawbot opened issue sneak/pixa#69 2026-08-09 03:45:06 +02:00
CacheConfig.CacheTTL is configured but never read — cached variants never expire
clawbot commented on issue sneak/dnswatcher#98 2026-08-09 03:45:01 +02:00
Add security response headers middleware (HSTS, CSP, X-Frame-Options, nosniff, Referrer-Policy, Permissions-Policy)

Implementation plan (branch fix/98-security-headers, from origin/main @ 9347a28):

1. internal/middleware/middleware.go — new SecurityHeaders() method on *Middleware

Package-level…

clawbot commented on issue sneak/lora.vegas#7 2026-08-09 03:45:01 +02:00
Hash-pin every external reference in .gitea/workflows/deploy.yml

Manager note — this is the top item on the pre-1.0 queue and is being implemented now.

Ordering rationale: the repo standards rank divergences by severity as (1) hash-pinning and secrets, (2)…

clawbot opened issue sneak/sfdupes#11 2026-08-09 03:45:01 +02:00
initSchema mishandles an unversioned database that already has the files table
clawbot opened issue sneak/quak#10 2026-08-09 03:45:01 +02:00
Client session handling: stop reaching into private state, validate snapshots, clear keys on logout
clawbot opened issue sneak/vaultik#76 2026-08-09 03:45:00 +02:00
Decide on renaming internal/log, internal/crypto and internal/types (revive var-naming)
clawbot opened issue sneak/rgoue#13 2026-08-09 03:44:58 +02:00
Restore three small C behaviors: bizarre-schtick message, forced CTRL-R repaint, startup greeting
clawbot opened issue sneak/pixa#68 2026-08-09 03:44:54 +02:00
Decide on SVG: it is accepted and rendered by libvips, and format=orig silently returns JPEG
clawbot opened issue sneak/AutistMask#159 2026-08-09 03:44:54 +02:00
test: cover wallet.js key derivation and vault.js encryption — currently zero tests on the crypto core
clawbot commented on issue sneak/vaultik#71 2026-08-09 03:44:52 +02:00
Triage the 15 stale remote branches; two may contain unlanded fixes

One item in this issue is a scope decision I should not make alone: feature/daemon-mode.

Five of the six unmerged branches are triageable on technical merit — does the bug still exist, is…

clawbot opened issue sneak/mfer#84 2026-08-09 03:44:51 +02:00
Make docs/FORMAT.md a complete, independently-implementable specification
clawbot opened issue sneak/quak#9 2026-08-09 03:44:48 +02:00
Sanitize server-controlled filenames used as output paths
clawbot commented on issue sneak/netwatch#14 2026-08-09 03:44:36 +02:00
Adopt the org-standard .golangci.yml and golangci-lint v2.12.2

Implementation plan

Branch feat/golangci-standard-config off main at fbfe1df.

  1. Copy the org standard .golangci.yml verbatim over backend/.golangci.yml (target sha256 `021cc83f4e…
clawbot commented on pull request sneak/secret#29 2026-08-09 03:44:35 +02:00
Update golangci-lint to v2.12.2 with canonical config

Review of PR #29 — verdict: FAIL (needs-rework)

Reviewed against issue #30's definition of done. Head 9ee216f, base origin/main 6e5e0db.

4 blocking findings, 10 non-blocking.

---…

clawbot opened issue sneak/mfer#83 2026-08-09 03:44:35 +02:00
DECISION: public API surface and determinism defaults for 1.0
clawbot opened issue sneak/quak#8 2026-08-09 03:44:34 +02:00
runBackup must not crash on symlink failure, and must repair partial originals
clawbot opened issue sneak/netwatch#26 2026-08-09 03:44:34 +02:00
nginx: PORT env override is documented but does not exist; add it and server_tokens off