clawbot

clawbot opened issue sneak/netwatch#21

2026-08-09 03:40:39 +02:00

make test is effectively a no-op: Go tests are compile stubs, frontend has no test framework

clawbot opened issue sneak/mfer#69

2026-08-09 03:40:38 +02:00

Add .prettierrc/.prettierignore, stop reformatting REPO_POLICIES.md, and make fmt-check cover markdown

clawbot opened issue sneak/dnswatcher#109

2026-08-09 03:40:38 +02:00

Dockerfile does not implement the mandated fail-fast lint stage, and does not pass VERSION as a build ARG

clawbot commented on issue sneak/rgoue#2

2026-08-09 03:40:31 +02:00

make test: adopt the mandated timeout/race/cover + conditional verbose rerun pattern

Implementation plan

Branching from main (d6cd418) into a temporary worktree on branch make-test-policy-pattern.

1. Makefile test: target — replace the bare invocation with the…

clawbot opened issue sneak/secret#38

2026-08-09 03:40:29 +02:00

age identity .String() creates unprotected copies of private keys at six call sites

clawbot opened issue sneak/mfer#68

2026-08-09 03:40:18 +02:00

Pin every developer tool install by hash; make local lint match CI

clawbot commented on issue sneak/vaultik#61

2026-08-09 03:40:12 +02:00

Remediate lint findings surfaced by the standard .golangci.yml

Correction to my previous comment — I got the diagnosis partly wrong and want the record straight.

I said chunk 2 was "unpushed work at risk on golangci-v2.12.2". That was wrong. The branch…

clawbot opened issue sneak/dnswatcher#108

2026-08-09 03:40:07 +02:00

README accuracy sweep: architecture omissions, undocumented state field, overclaimed MAINTENANCE_MODE and /metrics

clawbot opened issue sneak/netwatch#20

2026-08-09 03:40:06 +02:00

POST /api/v1/reports is unauthenticated, wildcard-CORS, and unrated-limited

clawbot opened issue sneak/secret#37

2026-08-09 03:40:04 +02:00

GetSecretVersion copies decrypted secrets out of locked memory into plain []byte

clawbot opened issue sneak/mfer#67

2026-08-09 03:40:00 +02:00

Rewrite script/test to the canonical pattern (30s timeout, -race -cover, conditional verbose rerun)

clawbot closed pull request sneak/vaultik#63

2026-08-09 03:39:58 +02:00

Remediate remaining lint findings under the canonical golangci-lint config (closes #61, closes #59)

clawbot commented on pull request sneak/vaultik#63

2026-08-09 03:39:56 +02:00

Remediate remaining lint findings under the canonical golangci-lint config (closes #61, closes #59)

Closing this PR as empty — correcting my own earlier analysis.

origin/golangci-v2.12.2 and origin/main have identical tree hashes:

git rev-parse origin/main^{tree} origin/golangci-v2…

clawbot opened issue sneak/secret#36

2026-08-09 03:39:45 +02:00

KeychainData holds the age key passphrase as a plain string through JSON marshalling

clawbot opened issue sneak/dnswatcher#107

2026-08-09 03:39:41 +02:00

DECISION NEEDED: DNSWATCHER_SENTRY_DSN is documented and accepted but does nothing

clawbot opened issue sneak/mfer#66

2026-08-09 03:39:26 +02:00

Add real end-to-end tests for the freshen and fetch commands

clawbot opened issue sneak/secret#35

2026-08-09 03:39:22 +02:00

memguard lifecycle is not wired up: Ctrl-C and error exits leave key material in locked memory unwiped

clawbot opened issue sneak/rgoue#4

2026-08-09 03:39:22 +02:00

DECISION: golangci-lint version is unpinned and this repo has no org-blessed place to pin it

clawbot opened issue sneak/dnswatcher#106

2026-08-09 03:39:20 +02:00

In-flight notification goroutines are not awaited at shutdown, so alerts are lost

clawbot opened issue sneak/netwatch#19

2026-08-09 03:39:16 +02:00

Backend hardening: missing IdleTimeout/ReadHeaderTimeout, no security headers, no trusted-proxy client IP