• Joined on 2026-02-08
clawbot pushed to fix/issue-23 at sneak/mfer 2026-02-20 12:06:10 +01:00
5a015d9609 remove time-hard hash iteration from seed UUID derivation
f929f33d1e reduce seed iterations to 150M (~5-10s on modern hardware)
6a1e9a387f feat: add --seed flag for deterministic manifest UUID
75674b89d8 Add deterministic file ordering in Builder.Build()
Compare 4 commits »
clawbot commented on pull request sneak/mfer#35 2026-02-20 12:03:40 +01:00
chore: remove committed vendor/modcache archives

Rebased on next (resolved .gitignore conflict with merged #37). Removes vendor.tzst and modcache.tzst, adds them to .gitignore.

clawbot pushed to fix/remove-vendor-archive at sneak/mfer 2026-02-20 12:03:27 +01:00
101edd4c8e chore: remove committed vendor/modcache archives, add to .gitignore
6d1bdbb00f chore: remove stale .drone.yml (#37)
ae70cf6fb5 Fix FindExtraFiles reporting manifest and dotfiles as extra (closes #16) (#21)
5099b6951b Fix IsHiddenPath treating current directory as hidden (closes #14) (#19)
7b61bdd62b fix: handle errcheck warnings in gpg.go and gpg_test.go
Compare 71 commits »
clawbot commented on pull request sneak/upaas#95 2026-02-20 12:00:20 +01:00
chore: code cleanup and best practices (closes #45)

Changes

Rebased on main, resolved conflicts, and addressed review feedback:

Security hardening

  • Container log sanitization: SanitizeLogs() strips ANSI escapes and control chars…
clawbot pushed to chore/code-cleanup at sneak/upaas 2026-02-20 12:00:04 +01:00
4f81d9cb70 fix: address review feedback - security hardening and lint cleanup
clawbot opened issue sneak/mfer#38 2026-02-20 12:00:00 +01:00
Add branch protection to main branch
clawbot opened issue sneak/secret#23 2026-02-20 11:59:58 +01:00
Add branch protection to main branch
clawbot opened issue sneak/vaultik#43 2026-02-20 11:59:57 +01:00
Add branch protection to main branch
clawbot opened issue sneak/upaas#103 2026-02-20 11:59:56 +01:00
Add branch protection to main branch
clawbot opened issue sneak/dnswatcher#15 2026-02-20 11:59:56 +01:00
Add branch protection to main branch
clawbot pushed to chore/code-cleanup at sneak/upaas 2026-02-20 11:59:46 +01:00
db67324bea fix: address review feedback - security hardening and lint cleanup
387a0f1d9a feat: sanitize container log output beyond Content-Type
1417a87dff fix: sanitize container log output and fix lint issues
e2e270a557 chore: code cleanup and best practices (closes #45)
Compare 4 commits »
clawbot created pull request sneak/secret#22 2026-02-20 11:59:44 +01:00
chore: remove stale .cursorrules and coverage.out
clawbot created pull request sneak/mfer#37 2026-02-20 11:59:43 +01:00
chore: remove stale .drone.yml
clawbot pushed to chore/remove-stale-files at sneak/secret 2026-02-20 11:59:26 +01:00
7546cb094f chore: remove stale .cursorrules and coverage.out
clawbot created branch chore/remove-stale-files in sneak/secret 2026-02-20 11:59:26 +01:00
clawbot pushed to chore/remove-stale-files at sneak/mfer 2026-02-20 11:59:19 +01:00
de7d75e970 chore: remove stale .drone.yml
clawbot created branch chore/remove-stale-files in sneak/mfer 2026-02-20 11:59:19 +01:00
clawbot pushed to ci/make-check at sneak/secret 2026-02-20 11:58:44 +01:00
23aabdbcaa security: pin CI actions to commit SHAs
clawbot commented on pull request sneak/secret#21 2026-02-20 11:58:43 +01:00
ci: add Gitea Actions workflow for make check

Pinned CI action references to commit SHAs for security (tags are mutable and an RCE vector):

  • actions/checkout@v4actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
  • `actions/setu…
clawbot pushed to add-make-check at sneak/vaultik 2026-02-20 11:58:39 +01:00
28371476bc security: pin CI actions to commit SHAs