clawbot

clawbot pushed to ci/make-check at sneak/secret

2026-03-11 14:31:28 +01:00

8fbe95a834 fix: include .golangci.yml in Docker build context

clawbot commented on pull request sneak/secret#21

2026-03-11 14:29:23 +01:00

ci: add Gitea Actions workflow for make check

Rework agent dispatched to fix the .dockerignore excluding .golangci.yml (last review finding). Working on it now.

clawbot closed issue sneak/upaas#161

2026-03-11 12:09:08 +01:00

Run make fmt on JS static files

clawbot commented on issue sneak/upaas#161

2026-03-11 12:09:05 +01:00

Run make fmt on JS static files

The JS files in static/js/ are already formatted on main. Running make fmt produces no changes and make fmt-check passes cleanly.

It appears the formatting was included when [PR…

clawbot suggested changes for sneak/secret#24

2026-03-11 02:40:36 +01:00

secure-enclave-unlocker

Code Review: PR #24 — secure-enclave-unlocker

clawbot commented on pull request sneak/upaas#158

2026-03-11 02:38:57 +01:00

feat: monolithic env var editing with bulk save

Review (Round 7): ✅ PASS

Reviewing commit 316ccae (fix: reject duplicate env var keys with 400 instead of deduplicating).

Change Summary

deduplicateEnvPairs replaced with `validateEn…

clawbot commented on pull request sneak/upaas#158

2026-03-11 02:37:23 +01:00

feat: monolithic env var editing with bulk save

Reworked: duplicate env var keys are now rejected with 400 Bad Request instead of being silently deduplicated.

Changes:

Replaced deduplicateEnvPairs with validateEnvPairs — returns…

clawbot pushed to fix/issue-156-env-vars-404 at sneak/upaas

2026-03-11 02:37:16 +01:00

316ccae665 fix: reject duplicate env var keys with 400 instead of deduplicating

clawbot commented on pull request sneak/secret#21

2026-03-11 02:20:56 +01:00

ci: add Gitea Actions workflow for make check

Code Review — PR #21: ci: add Gitea Actions workflow for make check

clawbot commented on pull request sneak/upaas#158

2026-03-11 02:17:33 +01:00

feat: monolithic env var editing with bulk save

Review (Round 6): ✅ PASS

Reviewing commit eaf3d48 (fix: dedup env var keys, add IDOR test, enforce body size limit). This addresses the three items from the pipeline manager's critical…

clawbot commented on pull request sneak/upaas#158

2026-03-11 02:14:36 +01:00

feat: monolithic env var editing with bulk save

Rework pushed addressing the three items from the pipeline manager assessment:

1. Duplicate key dedup (last wins): Extracted deduplicateEnvPairs helper that iterates the pairs and keeps…

clawbot commented on pull request sneak/secret#21

2026-03-11 02:14:27 +01:00

ci: add Gitea Actions workflow for make check

Fixed: added fmt-check to make check prerequisites. Now check: build lint test fmt-check per REPO_POLICIES. Docker build verified.

clawbot pushed to fix/issue-156-env-vars-404 at sneak/upaas

2026-03-11 02:14:26 +01:00

eaf3d48eae fix: dedup env var keys, add IDOR test, enforce body size limit

clawbot pushed to ci/make-check at sneak/secret

2026-03-11 02:14:20 +01:00

88a7235c50 fix: add fmt-check to make check prerequisites

clawbot commented on pull request sneak/prompts#17

2026-03-11 02:07:51 +01:00

Add HTTP service hardening policy for 1.0 releases

Rework complete. Addressed the TLS policy feedback:

Change: Updated the TLS subsection to state that services never terminate TLS directly — they are always deployed behind a TLS-terminat…

clawbot pushed to feature/http-service-hardening-policy at sneak/prompts

2026-03-11 02:07:37 +01:00

6be01ea81f fix: clarify TLS policy — services never terminate TLS directly

clawbot commented on pull request sneak/prompts#17

2026-03-11 02:05:53 +01:00

Add HTTP service hardening policy for 1.0 releases

Good catch — the policy should reflect that our services never terminate TLS directly; they always sit behind a reverse proxy. Dispatching another rework to update the policy text accordingly…

clawbot commented on pull request sneak/prompts#17

2026-03-11 02:05:27 +01:00

Add HTTP service hardening policy for 1.0 releases

Rework complete. Removed the HTTP service hardening checklist section from NEW_REPO_CHECKLIST.md — these items don't belong in a new-repo setup checklist since the repo won't have an HTTP…

clawbot pushed to feature/http-service-hardening-policy at sneak/prompts

2026-03-11 02:05:14 +01:00

32cfb84831 remove HTTP hardening checklist from NEW_REPO_CHECKLIST.md

clawbot commented on pull request sneak/prompts#17

2026-03-11 02:03:32 +01:00

Add HTTP service hardening policy for 1.0 releases

Understood — the HTTP hardening checklist items don't belong in NEW_REPO_CHECKLIST.md since new repos won't have HTTP services yet. Dispatching rework to remove those changes and keep the…