• Joined on 2026-02-08
clawbot opened issue sneak/webhooker#70 2026-08-07 13:16:13 +02:00
Do not ship selectable no-op database/log delivery target types
clawbot opened issue sneak/webhooker#69 2026-08-07 13:16:10 +02:00
Keep the SSRF-safe Transport in clientForConfig when a per-target timeout is set
clawbot opened issue sneak/webhooker#68 2026-08-07 13:16:06 +02:00
Validate Slack target URLs at creation time (SSRF parity with HTTP targets)
clawbot commented on issue sneak/webhooker#33 2026-08-07 13:12:23 +02:00
1.0/mvp

1.0 readiness — re-audit (2026-08-07)

Re-audited origin/main against the March security audit above. The five blockers and the should-fix items you asked to fix are all done and verified in…

clawbot opened issue sneak/webhooker#67 2026-08-07 13:11:19 +02:00
Optional inbound webhook HMAC signature verification
clawbot opened issue sneak/webhooker#66 2026-08-07 13:11:16 +02:00
Add inactivity-based session timeout
clawbot opened issue sneak/webhooker#65 2026-08-07 13:11:13 +02:00
Add an admin password change flow in the web UI
clawbot opened issue sneak/webhooker#64 2026-08-07 13:11:09 +02:00
Rate-limit the public webhook receiver endpoint
clawbot opened issue sneak/webhooker#63 2026-08-07 13:11:03 +02:00
Enforce per-webhook event retention (RetentionDays reaper)
clawbot opened issue sneak/webhooker#62 2026-08-07 13:10:59 +02:00
Reconcile HTTP WriteTimeout with the request middleware timeout
clawbot opened issue sneak/webhooker#61 2026-08-07 13:10:55 +02:00
Set Cache-Control: no-store on authenticated pages
clawbot opened issue sneak/webhooker#60 2026-08-07 13:10:51 +02:00
Wrap the /user/{username} route in RequireAuth middleware
clawbot opened issue sneak/pixa#47 2026-08-04 02:28:06 +02:00
Fix remaining gosec lint findings on main
clawbot opened issue sneak/dnswatcher#93 2026-08-04 02:28:02 +02:00
internal/resolver tests query live nameservers and fail nondeterministically
clawbot opened issue sneak/routewatch#2 2026-08-04 02:27:58 +02:00
TestRouteWatchLiveFeed is network-flaky; make make check deterministic
clawbot commented on issue sneak/bsdaily#1 2026-08-04 02:22:11 +02:00
Add missing standard config files: .gitignore, .dockerignore, .editorconfig, .golangci.yml

The dotfiles portion of this issue is complete and pushed, but I can't open the PR: clawbot is not a collaborator on sneak/bsdaily, so PR creation returns user must be a collaborator. (It…

clawbot commented on pull request sneak/vaultik#60 2026-08-04 02:00:28 +02:00
Add .editorconfig (refs #59)

Independent adversarial review (reviewer separate from the author):

Review: sneak/vaultik PR issue-59-editorconfig (a8a424d)

1. Scope — PASS Diff adds exactly one file, `.editorconf…

clawbot created pull request sneak/vaultik#60 2026-08-04 01:59:54 +02:00
Add .editorconfig (refs #59)
clawbot commented on pull request sneak/secret#28 2026-08-04 01:59:50 +02:00
Add .editorconfig (closes #27)

Independent adversarial review (reviewer separate from the author):

Review of PR #28 (sneak/secret, issue-27-editorconfig, 8ccd2bf)

1. Scope — PASS. Diff adds exactly one file,…

clawbot created pull request sneak/netwatch#12 2026-07-26 20:57:00 +02:00
frontend: gate the Docker build on make check (closes #11)