clawbot
0 Followers · 0 Following
  • Joined on 2026-02-08
Repositories
1
 Projects Packages Code Public Activity Starred Repositories
clawbot pushed to security-audit at sneak/lora.vegas 2026-02-10 23:50:07 +01:00
ff1a6462ac Add security recon workflow
clawbot commented on pull request sneak/secret#8 2026-02-09 04:48:34 +01:00
Fix getLongTermPrivateKey derivation index hardcoded to 0 (closes #3)

Confirmed — make test passes on fix/issue-3:

  • Lint: ✅ 0 issues
  • Vet: ✅ clean
  • Tests: ✅ all pass
ok  	git.eeqj.de/sneak/secret/internal/cli	5.104s
ok  	git.eeqj.de/sneak/secret/…
clawbot commented on pull request sneak/secret#8 2026-02-09 02:46:00 +01:00
Fix getLongTermPrivateKey derivation index hardcoded to 0 (closes #3)

Updated the test to remove the mock. Now uses realVault — a minimal VaultInterface implementation backed by a real afero.MemMapFs with the same directory layout that vault.CreateVault…

clawbot commented on pull request sneak/secret#8 2026-02-09 02:45:41 +01:00
Fix getLongTermPrivateKey derivation index hardcoded to 0 (closes #3)

Re: using a real vault — getLongTermPrivateKey is unexported, so the test must be in package secret. But vault.Vault is in internal/vault which imports internal/secret, creating a…

clawbot commented on pull request sneak/secret#8 2026-02-09 02:42:34 +01:00
Fix getLongTermPrivateKey derivation index hardcoded to 0 (closes #3)

Test Results for TestGetLongTermPrivateKeyUsesVaultDerivationIndex

The test creates a vault with DerivationIndex: 5 and verifies that getLongTermPrivateKey derives the key at index 5…

clawbot commented on pull request sneak/secret#11 2026-02-09 02:40:47 +01:00
Remove redundant longterm.age encryption in Init command (closes #6)

make test output (branch fix/issue-6)

This PR removes redundant code (duplicate longterm.age encryption) but does not add new test files. Existing tests all pass:

golangci-lint run…
clawbot commented on pull request sneak/secret#9 2026-02-09 02:26:35 +01:00
Fix NumSecrets() always returning 0 (closes #4)

Understood — will use make test (which runs lint → vet → go test) and make check (build + test) from the Makefile going forward, not ad-hoc commands. Will apply this to all repos.

clawbot commented on pull request sneak/secret#8 2026-02-09 02:21:51 +01:00
Fix getLongTermPrivateKey derivation index hardcoded to 0 (closes #3)

Added TestGetLongTermPrivateKeyUsesVaultDerivationIndex — creates a mock vault with DerivationIndex=5, sets SECRET_MNEMONIC env var, and verifies the derived key matches index 5 (not…

clawbot commented on pull request sneak/secret#9 2026-02-09 02:21:05 +01:00
Fix NumSecrets() always returning 0 (closes #4)

Test Results

Tests with ONLY test changes (no fix applied): FAIL

=== RUN   TestVaultOperations
=== RUN   TestVaultOperations/CreateVault
=== RUN   TestVaultOperations/ListVaults
===…
clawbot commented on pull request sneak/mfer#28 2026-02-09 02:16:43 +01:00
Add deterministic file ordering in Builder.Build() (closes #23)

Rebased again onto latest next (now includes PR#17, #18, #20 merges). All tests pass. Conflict resolved.

clawbot pushed to fix/issue-23 at sneak/mfer 2026-02-09 02:16:28 +01:00
85fc39cace reduce seed iterations to 150M (~5-10s on modern hardware)
350899f57d feat: add --seed flag for deterministic manifest UUID
410dd20032 Add deterministic file ordering in Builder.Build()
1f12d10cb7 Fix errors.Is with errors.New() never matching in checker (closes #12) (#17)
7f25970dd3 Fix URL encoding for file paths in fetch command (closes #13) (#18)
Compare 6 commits »
clawbot closed pull request sneak/mfer#11 2026-02-09 02:15:20 +01:00
docs: add TODO.md with design questions and 1.0 implementation plan
clawbot commented on pull request sneak/mfer#11 2026-02-09 02:15:19 +01:00
docs: add TODO.md with design questions and 1.0 implementation plan

The TODO.md content from this PR is already on next (was committed directly earlier). After rebasing, there are no remaining changes to merge. Closing as the content is already incorporated.

clawbot pushed to todo-md at sneak/mfer 2026-02-09 02:14:47 +01:00
clawbot created branch todo-md in sneak/mfer 2026-02-09 02:14:47 +01:00
clawbot commented on pull request sneak/mfer#7 2026-02-09 02:14:40 +01:00
add links to metalink format

Rebased onto current main and resolved the conflict. The metalink "See Also" section is now placed before the Links/Authors/License sections that were added in the README restructure (#8).

Also…

clawbot pushed to readme at sneak/mfer 2026-02-09 02:14:30 +01:00
60e1a306f3 add links to metalink format
2717685619 update readme to conform with my new readme howto standards (#8)
Compare 2 commits »
clawbot pushed to fix/issue-12 at sneak/mfer 2026-02-09 02:13:26 +01:00
75c88d0a52 fix: use os.ErrNotExist instead of errors.New() for file-not-found detection in checkers
70af055d4e Fix newTimestampFromTime panic on extreme dates (closes #15) (#20)
04b05e01e8 Consolidate scanner/checker — delete internal/scanner/ and internal/checker/ (closes #22) (#27)
7144617d0e Add decompression size limit in deserializeInner() (closes #24) (#29)
2efffd9da8 Specify and enforce path invariants (closes #26) (#31)
Compare 6 commits »
clawbot pushed to fix/issue-14 at sneak/mfer 2026-02-09 02:12:54 +01:00
d6234d3d65 fix: IsHiddenPath returns false for "." and "/" (current dir/root are not hidden)
70af055d4e Fix newTimestampFromTime panic on extreme dates (closes #15) (#20)
04b05e01e8 Consolidate scanner/checker — delete internal/scanner/ and internal/checker/ (closes #22) (#27)
7144617d0e Add decompression size limit in deserializeInner() (closes #24) (#29)
2efffd9da8 Specify and enforce path invariants (closes #26) (#31)
Compare 6 commits »
clawbot pushed to fix/issue-16 at sneak/mfer 2026-02-09 02:12:36 +01:00
bc4366aad4 fix: FindExtraFiles skips dotfiles and manifest files to avoid false positives
70af055d4e Fix newTimestampFromTime panic on extreme dates (closes #15) (#20)
04b05e01e8 Consolidate scanner/checker — delete internal/scanner/ and internal/checker/ (closes #22) (#27)
7144617d0e Add decompression size limit in deserializeInner() (closes #24) (#29)
2efffd9da8 Specify and enforce path invariants (closes #26) (#31)
Compare 6 commits »