• Joined on 2026-02-08
clawbot pushed to fix/gosec-g704-ssrf at sneak/dnswatcher 2026-02-20 09:21:45 +01:00
bf8c74c97a fix: resolve gosec G704 SSRF findings without suppression
clawbot commented on pull request sneak/vaultik#37 2026-02-20 09:19:11 +01:00
feat: implement --prune flag on snapshot create (closes #4)

Branch is already up to date with main — no rebase needed.

clawbot commented on pull request sneak/vaultik#31 2026-02-20 09:19:02 +01:00
Use v.Stdout/v.Stdin instead of os.Stdout for all user-facing output (closes #26)

Rebased onto main and resolved conflicts. make test passes cleanly:

  • golangci-lint: 0 issues
  • All tests pass
  • Removed duplicate FetchAndDecryptBlob from restore.go (kept version in…
clawbot commented on pull request sneak/dnswatcher#6 2026-02-20 09:18:53 +01:00
feat: implement TCP port connectivity checker (closes #3)

What specifically needs rework? The previous review feedback (concurrent checks, port validation) has been addressed. Happy to fix whatever you see.

clawbot pushed to fix/issue-26 at sneak/vaultik 2026-02-20 09:18:52 +01:00
34899a0293 fix: resolve rebase conflicts, fix errcheck issues, implement FetchAndDecryptBlob
e7f161395b refactor: add helper wrappers for stdin/stdout/stderr IO
197e3c0641 fix: use v.Stdout/v.Stdin instead of os.Stdout for all user-facing output
463eeebcbe fix: replace in-memory blob cache with disk-based LRU cache (closes #29)
d77ac18aaa fix: add missing printfStdout, printlnStdout, scanlnStdin, FetchBlob, and FetchAndDecryptBlob methods
Compare 5 commits »
clawbot commented on issue sneak/dnswatcher#12 2026-02-20 09:18:01 +01:00
CRITICAL: resolver tests hit real DNS, test suite exceeds 30s

Fixed in PR #9. Resolver tests now use a mock DNS client (injected via DNSClient interface) that simulates the full delegation chain in-process. No network calls, all tests complete in <1s.…

clawbot commented on pull request sneak/dnswatcher#9 2026-02-20 09:18:01 +01:00
feat: implement iterative DNS resolver (closes #1)

Fix: Resolver tests now hermetic and fast

Changes

  • Extracted DNSClient interface for dependency injection
  • Converted resolver DNS calls from package-level functions to receiver methods…
clawbot pushed to feature/resolver at sneak/dnswatcher 2026-02-20 09:17:35 +01:00
d786315452 fix: mock DNS in resolver tests for hermetic, fast unit tests
ee40af94da Merge origin/main into feature/resolver
e185000402 Merge pull request 'feat: implement watcher monitoring orchestrator (closes #2)' (#8) from feature/watcher-implementation into main
d5738d6d43 Merge branch 'main' into feature/watcher-implementation
5e4631776a Merge pull request 'feat: unify DOMAINS/HOSTNAMES into single TARGETS config (closes #10)' (#11) from feature/unified-targets into main
Compare 10 commits »
clawbot commented on pull request sneak/vaultik#37 2026-02-20 09:17:22 +01:00
feat: implement --prune flag on snapshot create (closes #4)

Rebased onto main and resolved conflicts. make test (lint + fmt-check + tests) passes cleanly:

  • golangci-lint: 0 issues
  • All tests pass
  • Removed duplicate FetchAndDecryptBlob/FetchBlob/`sc…
2bf085bed6 fix: resolve rebase conflicts, fix errcheck issues, implement FetchAndDecryptBlob
1bebd375e2 feat: implement --prune flag on snapshot create (closes #4)
0f8875e063 refactor: add helper wrappers for stdin/stdout/stderr IO
7ff96b80f2 fix: use v.Stdout/v.Stdin instead of os.Stdout for all user-facing output
853fe6b0a7 fix: replace in-memory blob cache with disk-based LRU cache (closes #29)
Compare 6 commits »
clawbot commented on pull request sneak/dnswatcher#6 2026-02-20 09:15:08 +01:00
feat: implement TCP port connectivity checker (closes #3)

Addressed review feedback:

clawbot commented on pull request sneak/secret#20 2026-02-20 09:15:04 +01:00
Add secret.Warn() calls for all silent anomalous conditions

Code Review: Add secret.Warn() calls

clawbot commented on pull request sneak/mfer#32 2026-02-20 09:15:03 +01:00
1.0 quality polish — code review, tests, bug fixes, documentation

Code Review: 1.0 quality polish

clawbot commented on pull request sneak/vaultik#23 2026-02-20 09:15:02 +01:00
feat: add progress bar to restore operation

Code Review: Add progress bar to restore operation

clawbot commented on pull request sneak/vaultik#22 2026-02-20 09:15:01 +01:00
fix: track and report file restore failures

Code Review: Track and report file restore failures

clawbot commented on pull request sneak/vaultik#36 2026-02-20 09:15:01 +01:00
Add CompressStream double-close regression test (closes #35)

Code Review: CompressStream double-close regression test

clawbot commented on pull request sneak/upaas#100 2026-02-20 09:15:00 +01:00
ci: add Gitea Actions workflow for make check (closes #96)

Code Review: CI workflow for make check

clawbot pushed to feature/portcheck-implementation at sneak/dnswatcher 2026-02-20 09:14:58 +01:00
57cd228837 feat: make CheckPorts concurrent and add port validation
ab39e77015 feat: implement TCP port connectivity checker (closes #3)
Compare 2 commits »
clawbot commented on pull request sneak/dnswatcher#13 2026-02-20 09:13:15 +01:00
fix: suppress gosec G704 SSRF false positive on webhook URLs

Rewrote this PR to properly fix the SSRF concern instead of suppressing it.

What changed:

  • Added parseWebhookURL() that validates scheme is http/https and host is non-empty — this…
clawbot pushed to fix/gosec-g704-ssrf at sneak/dnswatcher 2026-02-20 09:13:04 +01:00
21e516e86c fix: validate webhook URL scheme/host against SSRF (gosec G704)
5e4631776a Merge pull request 'feat: unify DOMAINS/HOSTNAMES into single TARGETS config (closes #10)' (#11) from feature/unified-targets into main
f8d5a8f6cc fix: resolve gosec SSRF findings and formatting issues
73e01c7664 feat: unify DOMAINS/HOSTNAMES into single TARGETS config
Compare 4 commits »