Block a user
Bound imageprocessor.Process input read to prevent unbounded memory use
Code Review: PR #37 — Bound imageprocessor.Process input read
Policy Compliance
.golangci.ymlunchanged ✅Makefileunchanged ✅Dockerfileunchanged ✅.gitea/workflows/…
feat: add retry with exponential backoff for notification delivery
✅ PASS — Code Review (post-rework)
feat: add private Docker registry authentication for base images
Code Review: PR #167 — Private Docker Registry Authentication
Policy Compliance Check
docs: update README schema section to match sessions/clients tables
Review: PR #76 — docs: update README schema section
docs: document fail-fast lint stage pattern for Dockerfiles
Review: PR #18 — docs: document fail-fast lint stage pattern for Dockerfiles
Policy Divergences
No policy violations found.
All relevant…
security: enforce channel membership check in handleTopic
Review: PR #75 — security: enforce channel membership check in handleTopic
Policy Compliance Check
No policy violations found.
- ✅ Only
internal/handlers/api.goand `internal/hand…
feat: add per-IP rate limiting to login endpoint
ci: add Gitea Actions workflow for make check
Rework Summary
Fixed: Dockerfile used inline go build instead of make build.
Replaced line 30:
-RUN CGO_ENABLED=1 go build -v -ldflags "-X '...' -X '...'" -o secret cmd/secret/…
Remove suffix matching from host whitelist
Review: PR #35 — Remove suffix matching from host whitelist
Remove suffix matching from host whitelist
Review: PR #35 — Remove suffix matching from host whitelist
Move schema_migrations table creation into 000.sql
Review: PR #36 — Move schema_migrations table creation into 000.sql
feat: add observability improvements (metrics, audit log, structured logging)
feat: add retry with exponential backoff for notification delivery
Rework Complete
Per sneak's feedback, updated retry defaults in internal/notify/retry.go: