• Joined on 2026-02-08
clawbot opened issue sneak/upaas#181 2026-08-07 18:41:17 +02:00
Deploy µPaaS to fsn1app1 and verify end-to-end
clawbot opened issue sneak/upaas#180 2026-08-07 18:41:07 +02:00
Verify branch protection on main requires the Check workflow before merge
clawbot opened issue sneak/upaas#179 2026-08-07 18:40:59 +02:00
Bump Dockerfile lint stage golangci-lint pin from v2.10.1 to current v2.12.x
clawbot opened issue sneak/upaas#178 2026-08-07 18:40:49 +02:00
lint: fix all 24 goconst findings (repeated string literals)
clawbot opened issue sneak/upaas#177 2026-08-07 18:40:39 +02:00
lint: fix gosec G703 path traversal finding in deploy log download handler
clawbot commented on issue sneak/vaultik#61 2026-08-07 18:40:33 +02:00
Remediate lint findings surfaced by the standard .golangci.yml

Starting the first chunk: the three mechanical whitespace/return-style linters — wsl_v5 (1050), nlreturn (378), noinlineerr (373) — which together are ~60% of all findings.

Plan:

  1. Add…
clawbot opened issue sneak/upaas#176 2026-08-07 18:40:31 +02:00
lint: fix 22 gosec G710 open-redirect findings in internal/handlers/app.go
clawbot opened issue sneak/upaas#175 2026-08-07 18:40:22 +02:00
lint: fix all 47 noctx findings (httptest.NewRequest without context)
clawbot commented on issue sneak/webhooker#64 2026-08-07 18:38:14 +02:00
Rate-limit the public webhook receiver endpoint

Definition of done and implementation plan

Picking this up as the next 1.0.0 work unit.

Definition of done

  • Every request to the public receiver /webhook/{uuid} is rate-limited per…
clawbot commented on issue sneak/pixa#52 2026-08-07 18:38:05 +02:00
P0: validate configuration on startup, fail fast on bad config

Implementation is up as PR #53 (branch feature/config-validation, labeled needs-review), executed per the plan above: TDD (failing enforcement tests committed first, then the implementation),…

clawbot created pull request sneak/pixa#53 2026-08-07 18:37:50 +02:00
feat: validate configuration on startup, fail fast on bad config (closes #52)
clawbot pushed to feature/config-validation at sneak/pixa 2026-08-07 18:37:31 +02:00
2fb0801dc6 feat: validate configuration on startup, fail fast on bad config (closes #52)
clawbot pushed to feature/config-validation at sneak/pixa 2026-08-07 18:37:16 +02:00
71782f2e9b docs: record startup config validation in TODO.md (closes #52)
f4c7dc4cd7 feat: validate configuration on startup, fail fast on bad config (#52)
f19da2c02c test: add failing startup config validation tests (#52)
Compare 3 commits »
clawbot created branch feature/config-validation in sneak/pixa 2026-08-07 18:37:16 +02:00
clawbot commented on pull request sneak/webhooker#84 2026-08-07 18:36:58 +02:00
Implement the database archiving target (closes #43)

Rework applied

Pushed d35ad0c addressing both required changes from the review above:

  1. Fail-loud delivery failure (internal/delivery/target_database.go): Deliver now records the attempt…
clawbot pushed to issue-43-database-archiving at sneak/webhooker 2026-08-07 18:36:44 +02:00
d35ad0c49e Fail deliveries on archive errors; validate expiry at creation (#43)
clawbot commented on pull request sneak/webhooker#84 2026-08-07 18:30:52 +02:00
Implement the database archiving target (closes #43)

Independent adversarial review (second, independent pass)

Reviewed the full diff at head 38cfe76 against issue #43 (sneak's authoritative spec and the implementation comment), REPO_POLICIES.md,…

clawbot commented on issue sneak/vaultik#59 2026-08-07 18:30:35 +02:00
Add .editorconfig and the standard .golangci.yml

Status: the standard .golangci.yml has landed on main (928c389..23d22a0). Source: copied byte-for-byte from the vendored policy set in sneak/prompts (verified identical with cmp), per…

clawbot pushed to main at sneak/vaultik 2026-08-07 18:30:13 +02:00
23d22a0f19 Add standard .golangci.yml (refs #59)
c9c72ef29d script/bootstrap: install sqlite3, which the test suite shells out to
Compare 2 commits »
clawbot commented on pull request sneak/webhooker#83 2026-08-07 18:29:54 +02:00
Add admin password change flow (closes #65)

Rework applied

Pushed 8362ce9 addressing the required change from the review above:

  • internal/middleware/ratelimit.go: extracted the login limiter's POST-only, per-IP pattern into a shared…