• Joined on 2026-02-08
clawbot commented on pull request sneak/vaultik#42 2026-02-20 11:58:38 +01:00
Add make check target and CI workflow

Pinned CI action references to commit SHAs for security (tags are mutable and an RCE vector):

  • actions/checkout@v4actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
  • `actions/setu…
clawbot pushed to add-make-check at sneak/mfer 2026-02-20 11:58:29 +01:00
4023ef28a1 security: pin CI actions to commit SHAs
clawbot commented on pull request sneak/mfer#36 2026-02-20 11:58:28 +01:00
Add make check target and CI workflow

Pinned CI action references to commit SHAs for security (tags are mutable and an RCE vector):

  • actions/checkout@v4actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
  • `actions/setu…
clawbot commented on pull request sneak/dnswatcher#14 2026-02-20 11:58:10 +01:00
ci: add Gitea Actions workflow for make check

Pinned CI action references to commit SHAs for security (tags are mutable and an RCE vector):

  • actions/checkout@v4actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
  • `actions/setu…
clawbot pushed to ci/make-check at sneak/dnswatcher 2026-02-20 11:58:09 +01:00
b2e8ffe5e9 security: pin CI actions to commit SHAs
clawbot pushed to chore/code-cleanup at sneak/upaas 2026-02-20 11:54:55 +01:00
0bb59bf9c2 feat: sanitize container log output beyond Content-Type
dcff249fe5 fix: sanitize container log output and fix lint issues
8ad2c6e42c Merge pull request 'Fix all main branch lint issues (closes #101)' (#102) from fix/main-lint-issues into main
0fcf12d2cc fix: resolve all lint issues on main branch
3a4e999382 Merge pull request 'revert: undo PR #98 (CI + linter config changes)' (#99) from revert/pr-98 into main
Compare 8 commits »
clawbot commented on pull request sneak/upaas#95 2026-02-20 11:54:54 +01:00
chore: code cleanup and best practices (closes #45)

Rebase Complete

Rebased chore/code-cleanup onto origin/main to resolve merge conflicts from PR #102 (lint fixes).

Conflict Resolution

  • All conflicts were #nosec vs //nolint:gosec
clawbot created pull request sneak/mfer#36 2026-02-20 11:54:22 +01:00
Add make check target and CI workflow
clawbot created pull request sneak/vaultik#42 2026-02-20 11:54:21 +01:00
Add make check target and CI workflow
clawbot pushed to add-make-check at sneak/mfer 2026-02-20 11:54:10 +01:00
4f98c1eb88 add CI workflow for make check
7b1cd0debc add make check target
Compare 2 commits »
clawbot created branch add-make-check in sneak/mfer 2026-02-20 11:54:10 +01:00
clawbot pushed to add-make-check at sneak/vaultik 2026-02-20 11:54:10 +01:00
c65170b8df add CI workflow for make check
d4b9d37ece add make check target
Compare 2 commits »
clawbot created branch add-make-check in sneak/vaultik 2026-02-20 11:54:10 +01:00
clawbot commented on pull request sneak/upaas#91 2026-02-20 11:52:23 +01:00
fix: validate repo URL format on app creation (closes #88)

Rebased on main (skipped old lint-fix commit, already resolved by #102). make check passes cleanly.

clawbot pushed to fix/repo-url-validation at sneak/upaas 2026-02-20 11:52:17 +01:00
a2087f4898 fix: restrict SCP-like URLs to git user only and reject path traversal
a2fb42520d fix: validate repo URL format on app creation (closes #88)
8ad2c6e42c Merge pull request 'Fix all main branch lint issues (closes #101)' (#102) from fix/main-lint-issues into main
0fcf12d2cc fix: resolve all lint issues on main branch
Compare 4 commits »
clawbot commented on pull request sneak/upaas#100 2026-02-20 11:51:19 +01:00
ci: add Gitea Actions workflow for make check (closes #96)

All external references now pinned by cryptographic commit hash (no tags):

  • actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 (v4)
  • `actions/setup-go@40f1582b2485089dde7abd97c1529aa768…
clawbot pushed to ci/check-workflow-only at sneak/upaas 2026-02-20 11:51:12 +01:00
6d600010b7 ci: add Gitea Actions workflow for make check (closes #96)
clawbot pushed to fix/main-lint-issues at sneak/upaas 2026-02-20 11:50:39 +01:00
fc7ba6135c fix: resolve wsl_v5 whitespace issue in deploy
a808f0c6a8 fix: resolve revive unused-parameter issues in export_test
e3d6202015 fix: resolve gosec G306 file permission issue in test
b2a25bc556 fix: resolve gosec G704 SSRF issues in notify service
b05f8eae43 fix: resolve gosec G705/G703 taint analysis issues in handlers
Compare 7 commits »
clawbot created pull request sneak/secret#21 2026-02-20 11:48:38 +01:00
ci: add Gitea Actions workflow for make check
clawbot created branch ci/make-check in sneak/secret 2026-02-20 11:48:37 +01:00