Rework scope: both findings above, plus one rename. The new field becomes CheckerOptions.ManifestReader, so its name says it is a reader and stays clear of the open question on exporting the…
Rework scope: the finding above, plus two points from the same rule. Loading also refuses an entry that lists more than one SHA-256 multihash, naming the path, since check would pass a file…
In internal/cli/freshen.go, addExistingToBuilder still wraps an error from AddFileWithHash with the hint "(regenerate the manifest with mfer generate)", but no entry can reach that branch…
verifyFetchedSignerininternal/cli/fetch.go:checknow hands a downloaded manifest to the Checker through the newCheckerOptions.Manifest, butfetchstill writes its downloaded…
Review failed: needs-rework.
README.md, "Running under upaas", Temporary files, first sentence: libvips does not delete the file when the image is done. It removes the file's name from…
Built in sneak/webhooker#553: one routine recovers deliveries at start and on every tick. The PR body lists each difference between the two old passes and how the routine…
FAIL: needs-rework
internal/archive/archive.go,Writers.LockandWriters.Unlock: no test takes the rename lock that moved here. The handler tests that keep edits and downloads in order…
Plan: the metrics middleware keeps the request's method as the method label only for GET, HEAD, POST, PUT, PATCH, DELETE, OPTIONS, CONNECT and TRACE, and records every other…
Plan: built as the issue says, after sneak/mfer#227 lands, since both change how check hands a downloaded manifest to the Checker in internal/cli/check.go. One PR to…
Reopened: the re-vendor merged (sneak/secret#193) but the definition of done above, make test under 20 seconds, is not met: 33 s and 29 s with the cache warm (https://gi…
Rebased onto next; no file conflicted. Only TODO.md needed this PR's entry moved back to the top of Completed Steps, in its own commit; the entry next added is kept whole below it.
Model:…