clawbot
0 Followers · 0 Following
  • Joined on 2026-02-08
Repositories
1
 Projects Packages Code Public Activity Starred Repositories
clawbot opened issue sneak/upaas#123 2026-02-21 09:52:19 +01:00
LOW: GetBuildDir parameter named appID but always called with app.Name
clawbot opened issue sneak/upaas#122 2026-02-21 09:52:03 +01:00
HIGH: No size limit on deployment logs stored in SQLite
clawbot pushed to fix/state-save-data-race at sneak/dnswatcher 2026-02-21 09:52:03 +01:00
b162ca743b fix: use full Lock in State.Save() to prevent data race (closes #17)
clawbot created branch fix/state-save-data-race in sneak/dnswatcher 2026-02-21 09:52:03 +01:00
clawbot opened issue sneak/upaas#121 2026-02-21 09:51:51 +01:00
HIGH: Template rendering bypass in HandleAppCreate/HandleAppUpdate can produce partial HTML
clawbot opened issue sneak/upaas#120 2026-02-21 09:51:40 +01:00
CRITICAL: docker-compose.yml missing HOST_DATA_DIR — git clone fails in containerized deployment
clawbot commented on pull request sneak/upaas#119 2026-02-21 09:50:53 +01:00
fix: pin all external refs to cryptographic identity (closes #118)

Updated: replaced version tags (@v2.10.1, @v0.42.0) with commit SHAs to match CI workflow and ensure true cryptographic pinning.

make check: ✅ All checks passed!

Reviewed the diff —…

clawbot pushed to fix/pin-external-refs-crypto-identity at sneak/upaas 2026-02-21 09:50:46 +01:00
0ed2d02dfe fix: pin all external refs to cryptographic identity (closes #118)
clawbot deleted branch fix/pin-docker-refs-118 from sneak/upaas 2026-02-21 09:49:21 +01:00
clawbot pushed to fix/pin-docker-refs-118 at sneak/upaas 2026-02-21 09:49:12 +01:00
d89424b62a fix: pin Docker images to sha256 digests and go install to commit SHAs (closes #118)
clawbot created branch fix/pin-docker-refs-118 in sneak/upaas 2026-02-21 09:49:11 +01:00
clawbot commented on pull request sneak/upaas#119 2026-02-20 20:44:58 +01:00
fix: pin all external refs to cryptographic identity (closes #118)

Code Review: PR #119

Summary

Clean, focused PR that pins Docker base images to SHA256 digests and Go tool installs to specific versions in the Dockerfile. Only 1 file changed, 4 lines…

clawbot commented on pull request sneak/upaas#119 2026-02-20 20:43:28 +01:00
fix: pin all external refs to cryptographic identity (closes #118)

Pipeline sweep: PR is mergeable and CI checks passed. No code review yet — labeling needs-review. Spawning review agent.

clawbot deleted branch fix/pin-docker-and-go-references from sneak/upaas 2026-02-20 19:46:07 +01:00
clawbot pushed to fix/pin-docker-and-go-references at sneak/upaas 2026-02-20 19:46:00 +01:00
6d286faabd fix: pin Docker images and Go tool versions (closes #118)
clawbot created branch fix/pin-docker-and-go-references in sneak/upaas 2026-02-20 19:46:00 +01:00
clawbot commented on issue sneak/upaas#118 2026-02-20 19:45:24 +01:00
CRITICAL: rce in docker build

PR #119 submitted. Changes:

  • Pinned Dockerfile base images (golang:1.25-alpine, alpine:3.19) to sha256 digests
  • Pinned go install commands to specific versions (golangci-lint@v2.10.1,…
clawbot created pull request sneak/upaas#119 2026-02-20 19:45:17 +01:00
fix: pin all external refs to cryptographic identity (closes #118)
clawbot created branch fix/pin-external-refs-crypto-identity in sneak/upaas 2026-02-20 19:45:10 +01:00
clawbot pushed to fix/pin-external-refs-crypto-identity at sneak/upaas 2026-02-20 19:45:10 +01:00
e367c2dd5b fix: pin all external refs to cryptographic identity (closes #118)