• Joined on 2026-02-08
clawbot opened issue sneak/secret#19 2026-02-20 09:01:46 +01:00
Audit: missing user warnings for anomalous conditions
clawbot commented on pull request sneak/dnswatcher#7 2026-02-20 08:59:22 +01:00
feat: implement TLS certificate inspector (closes #4)

make check passes

==> Checking formatting...
==> Running linter...
==> Running tests...
PASS ok sneak.berlin/go/dnswatcher/internal/tlscheck 1.367s
==> Building...
==> All checks passed!
clawbot commented on pull request sneak/dnswatcher#6 2026-02-20 08:59:07 +01:00
feat: implement TCP port connectivity checker (closes #3)

make check passes

==> Checking formatting...
==> Running linter...
==> Running tests...
PASS ok sneak.berlin/go/dnswatcher/internal/portcheck 1.333s
==> Building...
==> All checks passed!
clawbot commented on pull request sneak/secret#17 2026-02-20 08:57:52 +01:00
Skip unlocker directories with missing metadata instead of failing (closes #1)

Fixed per review feedback:

  • Added secret.Warn() function that prints to stderr unconditionally (no debug/verbose flag needed)
  • Changed missing metadata log from secret.Debug() to `secret.War…
clawbot pushed to fix/issue-25 at sneak/vaultik 2026-02-20 08:56:43 +01:00
ddc23f8057 fix: return errors from deleteSnapshotFromLocalDB instead of swallowing them
d77ac18aaa fix: add missing printfStdout, printlnStdout, scanlnStdin, FetchBlob, and FetchAndDecryptBlob methods
825f25da58 Merge pull request 'Validate table name against allowlist in getTableCount (closes #27)' (#32) from fix/issue-27 into main
162d76bb38 Merge branch 'main' into fix/issue-27
bfd7334221 fix: replace table name allowlist with regex sanitization
Compare 9 commits »
clawbot commented on pull request sneak/dnswatcher#7 2026-02-20 08:55:26 +01:00
feat: implement TLS certificate inspector (closes #4)

Added tests for the no-peer-certificates error path:

  • TestCheckCertificateNoPeerCerts: verifies CheckCertificate returns an error when the server closes without presenting certificates -…
clawbot pushed to feature/tlscheck-implementation at sneak/dnswatcher 2026-02-20 08:55:19 +01:00
3c32971e11 test: add tests for no-peer-certificates error path
clawbot pushed to feat/restore-progress-bar at sneak/vaultik 2026-02-20 08:55:12 +01:00
dc39e5b6e2 feat: add progress bar to restore operation
d77ac18aaa fix: add missing printfStdout, printlnStdout, scanlnStdin, FetchBlob, and FetchAndDecryptBlob methods
825f25da58 Merge pull request 'Validate table name against allowlist in getTableCount (closes #27)' (#32) from fix/issue-27 into main
162d76bb38 Merge branch 'main' into fix/issue-27
bfd7334221 fix: replace table name allowlist with regex sanitization
Compare 9 commits »
clawbot commented on pull request sneak/vaultik#23 2026-02-20 08:55:11 +01:00
feat: add progress bar to restore operation

Code Review: LGTM

Adds a progress bar (via progressbar lib) to the restore operation showing bytes restored.

  • Calculates total expected bytes upfront, creates terminal-aware progress…
clawbot commented on pull request sneak/secret#18 2026-02-20 08:54:14 +01:00
Return error from GetDefaultStateDir when home directory unavailable (closes #14)

Added Go-specific coding policies to AGENTS.md as requested:

  1. No panic/log.Fatal/os.Exit in library code — always return errors
  2. Constructors return (*T, error), not just *T 3.…
clawbot commented on pull request sneak/secret#18 2026-02-20 08:53:58 +01:00
Return error from GetDefaultStateDir when home directory unavailable (closes #14)

Fixed. NewCLIInstance() and NewCLIInstanceWithFs() now return (*Instance, error) instead of panicking.

  • RunE callers propagate the error via return fmt.Errorf(...)
  • Command construction…
clawbot commented on pull request sneak/vaultik#22 2026-02-20 08:53:50 +01:00
fix: track and report file restore failures

Code Review: LGTM

Clean, minimal change that correctly tracks and reports file restore failures.

  • Increments result.FilesFailed and appends to result.FailedFiles when restoreFile
clawbot pushed to fix/restore-error-handling at sneak/vaultik 2026-02-20 08:53:23 +01:00
cafb3d45b8 fix: track and report file restore failures
d77ac18aaa fix: add missing printfStdout, printlnStdout, scanlnStdin, FetchBlob, and FetchAndDecryptBlob methods
825f25da58 Merge pull request 'Validate table name against allowlist in getTableCount (closes #27)' (#32) from fix/issue-27 into main
162d76bb38 Merge branch 'main' into fix/issue-27
bfd7334221 fix: replace table name allowlist with regex sanitization
Compare 9 commits »
clawbot commented on pull request sneak/dnswatcher#7 2026-02-20 08:52:20 +01:00
feat: implement TLS certificate inspector (closes #4)

Fixed both review points:

  1. No peer certs → error: extractCertInfo now returns (nil, ErrNoPeerCertificates) instead of an empty struct. New sentinel error ErrNoPeerCertificates
clawbot pushed to feature/tlscheck-implementation at sneak/dnswatcher 2026-02-20 08:51:57 +01:00
cc49207e27 fix: return error for no peer certs, include IP SANs
clawbot pushed to main at sneak/vaultik 2026-02-20 08:51:56 +01:00
d77ac18aaa fix: add missing printfStdout, printlnStdout, scanlnStdin, FetchBlob, and FetchAndDecryptBlob methods
clawbot pushed to feature/resolver at sneak/dnswatcher 2026-02-20 08:50:49 +01:00
0b4a45beff fix: sanitize URLs in notify package to resolve gosec G704 SSRF findings
clawbot pushed to feature/resolver at sneak/dnswatcher 2026-02-20 08:49:30 +01:00
ff22f689ea fix: format resolver_test.go with goimports
clawbot commented on pull request sneak/secret#18 2026-02-20 08:49:21 +01:00
Return error from GetDefaultStateDir when home directory unavailable (closes #14)

Good catch — the panic in NewCLIInstance/NewCLIInstanceWithFs is there because these constructors return *Instance (no error return), so the error had nowhere to go. The t.Fatalf in…

clawbot commented on pull request sneak/dnswatcher#8 2026-02-20 08:49:17 +01:00
feat: implement watcher monitoring orchestrator (closes #2)

make check audit result

All checks passed.

==> Checking formatting...
==> Running linter...
0 issues.
==> Running tests...
--- PASS: TestNSChangeDetection (0.00s)
--- PASS:…