• Joined on 2026-02-08
clawbot opened issue sneak/netwatch#15 2026-08-09 03:37:13 +02:00
Dotfile compliance: add root .editorconfig, harden .gitignore, exclude .git from .dockerignore
clawbot opened issue sneak/netwatch#14 2026-08-09 03:36:49 +02:00
Adopt the org-standard .golangci.yml and golangci-lint v2.12.2
clawbot opened issue sneak/dnswatcher#101 2026-08-09 03:36:47 +02:00
No rate limiting on the Basic-Auth-protected /metrics endpoint
clawbot commented on issue sneak/webhooker#80 2026-08-09 03:36:43 +02:00
Config parsing should fail loudly on set-but-unparseable env values (envInt, etc.)

Implementation plan

Branch issue-80-config-fail-loud off main @ 4f5ecb1, single commit titled with (closes #80).

  1. internal/config/config.go: add `envPositiveInt(key string, …
clawbot opened issue sneak/mfer#60 2026-08-09 03:36:42 +02:00
Adopt golangci-lint v2.12.2 and the canonical .golangci.yml
clawbot opened issue sneak/dnswatcher#100 2026-08-09 03:36:27 +02:00
CORS wildcard applies to the authenticated /metrics route, and advertises methods that do not exist
clawbot commented on pull request sneak/pixa#55 2026-08-09 03:36:20 +02:00
feat: cache size management and LRU eviction (closes #51)

Answering @sneak's question (issuecomment-45166). Read the code on the branch to answer this rather than quoting the PR body.

What reconciliation is for

Size accounting in this PR is a…

clawbot opened issue sneak/dnswatcher#99 2026-08-09 03:36:10 +02:00
http.Server is missing ReadTimeout, WriteTimeout, and IdleTimeout
clawbot opened issue sneak/dnswatcher#98 2026-08-09 03:35:55 +02:00
Add security response headers middleware (HSTS, CSP, X-Frame-Options, nosniff, Referrer-Policy, Permissions-Policy)
clawbot opened issue sneak/secret#31 2026-08-09 03:35:36 +02:00
Decision needed: three commits on main carry vendor advertising trailers
clawbot commented on issue sneak/vaultik#61 2026-08-09 03:34:51 +02:00
Remediate lint findings surfaced by the standard .golangci.yml

Manager note — picking this back up.

Found chunk 2 of the remediation sitting only in a local checkout, never pushed: branch golangci-v2.12.2, commits 6cf9211, 7ae470e, and a merge of…

clawbot commented on issue sneak/webhooker#90 2026-08-09 03:34:49 +02:00
Enforce request body size limit before CSRF middleware parses the form

Implementation requirements

Baseline: main @ 4f5ecb1.

Confirmed root cause

internal/server/routes.go. chi runs Use middleware in registration order, and every group registers…

clawbot commented on pull request sneak/secret#29 2026-08-09 03:34:39 +02:00
Update golangci-lint to v2.12.2 with canonical config

Manager note.

Filed #30 retroactively as the tracking issue for this work, and put both under the new 1.0.0 milestone. Labeled needs-review and assigned to clawbot; this PR was open with no…

clawbot created pull request sneak/vaultik#63 2026-08-09 03:34:38 +02:00
Remediate remaining lint findings under the canonical golangci-lint config (closes #61, closes #59)
clawbot commented on issue sneak/webhooker#80 2026-08-09 03:34:31 +02:00
Config parsing should fail loudly on set-but-unparseable env values (envInt, etc.)

Implementation requirements

Baseline: main @ 4f5ecb1. All work in internal/config unless the audit in step 5 finds offenders elsewhere.

Policy being encoded

A set-but-invalid…

clawbot opened issue sneak/secret#30 2026-08-09 03:33:49 +02:00
Adopt canonical .golangci.yml and golangci-lint v2.12.2
clawbot pushed to golangci-v2.12.2 at sneak/vaultik 2026-08-09 03:32:39 +02:00
3395c52216 Merge remote-tracking branch 'origin/main' into golangci-v2.12.2
7ae470e530 Remediate all lint findings under the canonical golangci-lint config
6cf9211407 Apply mechanical lint fixes for golangci-lint v2.12.2 rollout
Compare 3 commits »
clawbot created branch golangci-v2.12.2 in sneak/vaultik 2026-08-09 03:32:39 +02:00
clawbot commented on pull request sneak/pixa#55 2026-08-09 03:32:03 +02:00
feat: cache size management and LRU eviction (closes #51)

Manager note: this PR stays merge-ready and assigned to sneak — no action needed here — but it should be merged BEFORE #54.

Re-verified independently just now: `feature/cache-size-evicti…

clawbot commented on pull request sneak/pixa#54 2026-08-09 03:31:42 +02:00
Update golangci-lint to v2.12.2 with canonical config

Manager note: pulling this back from merge-ready — cross-PR collision with #55 that neither PR's isolated review could have caught.

Both #54 and #55 are based on main at 61f42e6 and…