• Joined on 2026-02-08
clawbot closed issue sneak/vaultik#6 2026-02-20 11:23:14 +01:00
deleteSnapshotFromLocalDB silently ignores all errors
clawbot commented on issue sneak/vaultik#6 2026-02-20 11:23:13 +01:00
deleteSnapshotFromLocalDB silently ignores all errors

This is fixed by PR #30 ("Return errors from deleteSnapshotFromLocalDB instead of swallowing them"), which is already labeled merge-ready and assigned to sneak for merge.

clawbot created pull request sneak/vaultik#39 2026-02-20 11:23:03 +01:00
fix: verify blob hash after download and decryption (closes #5)
clawbot pushed to fix/verify-blob-hash at sneak/vaultik 2026-02-20 11:22:51 +01:00
a524eb415e fix: verify blob hash after download and decryption (closes #5)
clawbot created branch fix/verify-blob-hash in sneak/vaultik 2026-02-20 11:22:51 +01:00
clawbot commented on pull request sneak/vaultik#38 2026-02-20 11:17:53 +01:00
fix: use whitelist for SQL table names in getTableCount (closes #7)

You're right — table names are hardcoded in our own code, not user-supplied. No attack vector. Closed.

clawbot closed issue sneak/vaultik#7 2026-02-20 11:17:48 +01:00
getTableCount uses fmt.Sprintf for SQL table name — potential SQL injection
clawbot closed pull request sneak/vaultik#38 2026-02-20 11:17:47 +01:00
fix: use whitelist for SQL table names in getTableCount (closes #7)
clawbot commented on pull request sneak/vaultik#38 2026-02-20 11:17:13 +01:00
fix: use whitelist for SQL table names in getTableCount (closes #7)

make test output (lint + tests)

All checks pass — 0 lint issues, all tests PASS.

golangci-lint run
0 issues.

ok  git.eeqj.de/sneak/vaultik/internal/blob       0.787s
ok …
clawbot commented on pull request sneak/vaultik#22 2026-02-20 11:14:31 +01:00
fix: track and report file restore failures

make test passes cleanly (no rebase needed):

golangci-lint run — 0 issues
go fmt — clean
go test — all PASS
clawbot commented on pull request sneak/vaultik#23 2026-02-20 11:13:49 +01:00
feat: add progress bar to restore operation

make test passes cleanly (no rebase needed):

golangci-lint run — 0 issues
go fmt — clean
go test — all PASS
clawbot commented on pull request sneak/vaultik#30 2026-02-20 11:13:12 +01:00
Return errors from deleteSnapshotFromLocalDB instead of swallowing them (closes #25)

make test passes cleanly (no rebase needed):

golangci-lint run — 0 issues
go fmt — clean
go test — all PASS
clawbot commented on pull request sneak/vaultik#37 2026-02-20 11:12:52 +01:00
feat: implement --prune flag on snapshot create (closes #4)

Rebased onto latest main (after PR #31 merge). Skipped already-applied commits (helper wrappers were already on main).

make test output: All passing

  • golangci-lint run: 0 issues -…
76e047bbb2 feat: implement --prune flag on snapshot create (closes #4)
70d4fe2aa0 Merge pull request 'Use v.Stdout/v.Stdin instead of os.Stdout for all user-facing output (closes #26)' (#31) from fix/issue-26 into main
2f249e3ddd fix: address review feedback — use helper wrappers, remove duplicates, fix scanStdin usage
3f834f1c9c fix: resolve rebase conflicts, fix errcheck issues, implement FetchAndDecryptBlob
9879668c31 refactor: add helper wrappers for stdin/stdout/stderr IO
Compare 7 commits »
clawbot pushed to fix/issue-29 at sneak/vaultik 2026-02-20 11:12:31 +01:00
ed5d777d05 fix: set disk cache max size to 4x configured blob size instead of hardcoded 10 GiB
70d4fe2aa0 Merge pull request 'Use v.Stdout/v.Stdin instead of os.Stdout for all user-facing output (closes #26)' (#31) from fix/issue-26 into main
2f249e3ddd fix: address review feedback — use helper wrappers, remove duplicates, fix scanStdin usage
3f834f1c9c fix: resolve rebase conflicts, fix errcheck issues, implement FetchAndDecryptBlob
9879668c31 refactor: add helper wrappers for stdin/stdout/stderr IO
Compare 13 commits »
clawbot commented on pull request sneak/vaultik#34 2026-02-20 11:12:30 +01:00
Disk-based blob cache with LRU eviction during restore (closes #29)

Rebased onto latest main, ran go fmt. make test passes cleanly:

golangci-lint run — 0 issues
go fmt — clean
go test — all PASS
clawbot pushed to add-compressstream-regression-test at sneak/vaultik 2026-02-20 11:11:03 +01:00
2e7356dd85 Add CompressStream double-close regression test (closes #35)
70d4fe2aa0 Merge pull request 'Use v.Stdout/v.Stdin instead of os.Stdout for all user-facing output (closes #26)' (#31) from fix/issue-26 into main
2f249e3ddd fix: address review feedback — use helper wrappers, remove duplicates, fix scanStdin usage
3f834f1c9c fix: resolve rebase conflicts, fix errcheck issues, implement FetchAndDecryptBlob
9879668c31 refactor: add helper wrappers for stdin/stdout/stderr IO
Compare 13 commits »
clawbot commented on pull request sneak/vaultik#36 2026-02-20 11:11:03 +01:00
Add CompressStream double-close regression test (closes #35)

Rebased onto latest main. make test passes cleanly:

golangci-lint run — 0 issues
go fmt — clean
go test — all PASS
clawbot created pull request sneak/vaultik#38 2026-02-20 11:09:54 +01:00
fix: use whitelist for SQL table names in getTableCount (closes #7)
clawbot created branch fix/sql-injection-whitelist in sneak/vaultik 2026-02-20 11:09:42 +01:00