clawbot
0 Followers · 0 Following
  • Joined on 2026-02-08
Repositories
1
 Projects Packages Code Public Activity Starred Repositories
clawbot opened issue sneak/upaas#104 2026-02-20 12:27:58 +01:00
BUG: HandleEnvVarDelete uses wrong route parameter name — env var deletion always 404s
clawbot commented on pull request sneak/mfer#36 2026-02-20 12:17:47 +01:00
Add make check target and CI workflow

Restructured Makefile per review feedback:

  • make check-fmt — format checking (gofmt)
  • make lint — golangci-lint
  • make test — runs tests
  • make check — depends on check-fmt,…
clawbot pushed to add-make-check at sneak/mfer 2026-02-20 12:17:41 +01:00
ae0e96eba3 refactor: split check into check-fmt, lint, test targets
4f7459d509 security: pin all go install refs to commit SHAs
b19dff2456 security: pin CI actions to commit SHAs
f310001d1e add CI workflow for make check
950dd50c2e add make check target
Compare 5 commits »
clawbot commented on pull request sneak/mfer#32 2026-02-20 12:11:11 +01:00
1.0 quality polish — code review, tests, bug fixes, documentation

Rebased feature/1.0-polish onto origin/next — resolved merge conflicts in mfer/scanner.go and mfer/checker.go.

✅ make test — all tests pass ✅ make lint — 0 issues

Force-push…

clawbot pushed to feature/1.0-polish at sneak/mfer 2026-02-20 12:11:02 +01:00
386b22efb8 revert version bump: 1.0.0 back to 0.1.0
77de489063 docs: add FORMAT.md, answer design questions, bump version to 1.0.0
211f7e6f61 feat: add export command, HTTP URL support, --version flag, error wrapping audit
f68281d1ce feat: deterministic manifests by default, remove atime, rate-limit checker progress
655dfee585 Fix BaseURL.JoinPath encoding slashes in paths, add URL tests
Compare 18 commits »
clawbot pushed to add-make-check at sneak/mfer 2026-02-20 12:11:02 +01:00
6b592ee7b6 security: pin all go install refs to commit SHAs
clawbot pushed to add-make-check at sneak/vaultik 2026-02-20 12:10:55 +01:00
4a7efbae46 security: pin all go install refs to commit SHAs
clawbot pushed to ci/make-check at sneak/secret 2026-02-20 12:10:46 +01:00
845642d16a security: pin all go install refs to commit SHAs
clawbot pushed to ci/make-check at sneak/dnswatcher 2026-02-20 12:10:41 +01:00
c9c5530f60 security: pin all go install refs to commit SHAs
clawbot commented on pull request sneak/mfer#28 2026-02-20 12:06:44 +01:00
Add deterministic file ordering in Builder.Build() (closes #23)

Removed the time-hard hash iteration per review feedback:

  • Replaced 150M SHA-256 iteration key-stretching with a single hash in SetSeed()
  • Removed deriveSeedUUID() function and `seedIteratio…
clawbot pushed to fix/issue-23 at sneak/mfer 2026-02-20 12:06:35 +01:00
3c779465e2 remove time-hard hash iteration from seed UUID derivation
5572a4901f reduce seed iterations to 150M (~5-10s on modern hardware)
2adc275278 feat: add --seed flag for deterministic manifest UUID
6d9c07510a Add deterministic file ordering in Builder.Build()
Compare 4 commits »
clawbot commented on pull request sneak/mfer#28 2026-02-20 12:06:22 +01:00
Add deterministic file ordering in Builder.Build() (closes #23)

Removed the time-hard hash iteration per review:

  • Removed seedIterations constant (was 150M rounds)
  • deriveSeedUUID() now does a single SHA-256 hash instead of iterating
  • Updated CLI flag…
clawbot pushed to fix/issue-23 at sneak/mfer 2026-02-20 12:06:10 +01:00
5a015d9609 remove time-hard hash iteration from seed UUID derivation
f929f33d1e reduce seed iterations to 150M (~5-10s on modern hardware)
6a1e9a387f feat: add --seed flag for deterministic manifest UUID
75674b89d8 Add deterministic file ordering in Builder.Build()
Compare 4 commits »
clawbot commented on pull request sneak/mfer#35 2026-02-20 12:03:40 +01:00
chore: remove committed vendor/modcache archives

Rebased on next (resolved .gitignore conflict with merged #37). Removes vendor.tzst and modcache.tzst, adds them to .gitignore.

clawbot pushed to fix/remove-vendor-archive at sneak/mfer 2026-02-20 12:03:27 +01:00
101edd4c8e chore: remove committed vendor/modcache archives, add to .gitignore
6d1bdbb00f chore: remove stale .drone.yml (#37)
ae70cf6fb5 Fix FindExtraFiles reporting manifest and dotfiles as extra (closes #16) (#21)
5099b6951b Fix IsHiddenPath treating current directory as hidden (closes #14) (#19)
7b61bdd62b fix: handle errcheck warnings in gpg.go and gpg_test.go
Compare 71 commits »
clawbot commented on pull request sneak/upaas#95 2026-02-20 12:00:20 +01:00
chore: code cleanup and best practices (closes #45)

Changes

Rebased on main, resolved conflicts, and addressed review feedback:

Security hardening

  • Container log sanitization: SanitizeLogs() strips ANSI escapes and control chars…
clawbot pushed to chore/code-cleanup at sneak/upaas 2026-02-20 12:00:04 +01:00
4f81d9cb70 fix: address review feedback - security hardening and lint cleanup
clawbot opened issue sneak/mfer#38 2026-02-20 12:00:00 +01:00
Add branch protection to main branch
clawbot opened issue sneak/secret#23 2026-02-20 11:59:58 +01:00
Add branch protection to main branch
clawbot opened issue sneak/vaultik#43 2026-02-20 11:59:57 +01:00
Add branch protection to main branch