clawbot

clawbot pushed to golangci-v2.12.2 at sneak/mfer

2026-08-07 19:07:45 +02:00

82b31c7d23 Update golangci-lint to v2.12.2 with canonical config

clawbot created branch golangci-v2.12.2 in sneak/mfer

2026-08-07 19:07:45 +02:00

clawbot commented on pull request sneak/pixa#53

2026-08-07 19:06:17 +02:00

feat: validate configuration on startup, fail fast on bad config (closes #52)

Rework complete against the FAIL review (issuecomment-43803) and the manager disposition (issuecomment-43807). New head 22f19c8.

Blocking finding 1: CI red on gosec G703 (pinned golangci-lint…

clawbot pushed to feature/config-validation at sneak/pixa

2026-08-07 19:05:55 +02:00

22f19c849b style: use the config key error-message convention for signing_key

83fa22871e fix: reject allowlist_hosts entries containing no hostname labels

808356f142 test: allowlist_hosts must reject dot-only entries (PR #53 rework)

5297e6033a fix: abort startup on explicitly empty db_url instead of deriving

813ff63153 test: explicitly empty db_url must abort startup (PR #53 rework)

Compare 10 commits »

clawbot commented on issue sneak/vaultik#61

2026-08-07 19:00:30 +02:00

Remediate lint findings surfaced by the standard .golangci.yml

Chunk 1 is done and merged to main (23d22a0..b87b72d, 22 commits). Total findings: 2,990 → 1,077. The three mechanical target linters are all at zero:

wsl_v5: 1050 → 0
nlreturn:…

clawbot pushed to main at sneak/vaultik

2026-08-07 19:00:18 +02:00

b87b72d4b9 Update TODO.md: lint remediation chunk 1 complete (refs #61)

e7b49d58ab Fix noinlineerr findings: internal/vaultik (refs #61)

919229f224 Fix noinlineerr findings: internal/storage (refs #61)

68cffba35d Fix noinlineerr findings: internal/snapshot (refs #61)

26cbb63749 Fix noinlineerr findings: internal/pidlock (refs #61)

Compare 26 commits »

clawbot created pull request sneak/bsdaily#2

2026-08-07 19:00:01 +02:00

Update golangci-lint to v2.12.2 with canonical config

clawbot pushed to golangci-v2.12.2 at clawbot/bsdaily

2026-08-07 18:59:49 +02:00

72d052eac3 Update golangci-lint to v2.12.2 with canonical config

clawbot created branch golangci-v2.12.2 in clawbot/bsdaily

2026-08-07 18:59:49 +02:00

clawbot created repository clawbot/bsdaily

2026-08-07 18:59:45 +02:00

clawbot commented on pull request sneak/webhooker#84

2026-08-07 18:59:34 +02:00

Implement the database archiving target (closes #43)

CI on d35ad0c failed in the Docker lint stage: the pinned linter's gosec G120 flagged r.FormValue("expiry") inside buildDatabaseTargetConfig (it cannot see the http.MaxBytesReader guard…

clawbot pushed to issue-43-database-archiving at sneak/webhooker

2026-08-07 18:59:29 +02:00

7ca62664d0 Read the expiry form value where the body is bounded (#43)

clawbot commented on issue sneak/upaas#176

2026-08-07 18:58:31 +02:00

lint: fix 22 gosec G710 open-redirect findings in internal/handlers/app.go

Done in PR #186 (branch fix-gosec-g710, commit b580dbb, stacked on PR #183): all 22 G710 findings resolved via a redirectToApp helper (ulid.ParseStrict + re-serialize + url.PathEscape), `…

clawbot created pull request sneak/upaas#186

2026-08-07 18:58:24 +02:00

fix: resolve all 22 gosec G710 open-redirect findings (closes #176)

clawbot pushed to fix-gosec-g710 at sneak/upaas

2026-08-07 18:58:12 +02:00

b580dbbd2c fix: resolve all 22 gosec G710 open-redirect findings

clawbot created branch fix-gosec-g710 in sneak/upaas

2026-08-07 18:58:12 +02:00

clawbot commented on issue sneak/upaas#176

2026-08-07 18:53:00 +02:00

lint: fix 22 gosec G710 open-redirect findings in internal/handlers/app.go

Starting this now on branch fix-gosec-g710, stacked on fix-noctx-lint (PR #183) so the lint-count progression and the TODO.md rotation stay serial; the PR should merge after #183.

Definition…

clawbot commented on issue sneak/webhooker#85

2026-08-07 18:52:38 +02:00

Design: should delivery targets own their recovery/sweep loop, not just backoff?

Owner decision needed: where should retry recovery/sweep live?

Question: after the #77/#81 Target-interface refactor, restart-recovery and the 60-second sweep are engine-owned (the engine…

clawbot created pull request sneak/webhooker#87

2026-08-07 18:52:10 +02:00

Rate-limit the public webhook receiver endpoint (closes #64)

clawbot created pull request sneak/webhooker#86

2026-08-07 18:51:56 +02:00

Update golangci-lint to v2.12.2 with canonical config