7 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
clawbot	2e3526986f	simplify CI to docker build, pin all image refs by SHA ... - Replace convoluted CI workflow (setup-go, install golangci-lint, install goimports, make check) with simple 'docker build .' per repo policy - Pin Docker base images by SHA256 hash instead of mutable tags - Pin golangci-lint and goimports by commit hash instead of @latest - Add binutils-gold for linker compatibility on alpine - Run on all pushes, not just main/PR branches	2026-02-28 03:54:11 -08:00
clawbot	d0220e5814	fix: remove ErrNotImplemented stub — resolver, port, and TLS checks are fully implemented (closes #16) ... The ErrNotImplemented sentinel error was dead code left over from initial scaffolding. The resolver performs real iterative DNS lookups from root servers, PortCheck does TCP connection checks, and TLSCheck verifies TLS certificates and expiry. Removed the unused error constant.	2026-02-21 00:55:38 -08:00
clawbot	82fd68a41b	fix: deduplicate TLS expiry warnings to prevent notification spam (closes #18) ... checkTLSExpiry fired every monitoring cycle with no deduplication, causing notification spam for expiring certificates. Added an in-memory map tracking the last notification time per domain/IP pair, suppressing re-notification within the TLS check interval. Added TestTLSExpiryWarningDedup to verify deduplication works.	2026-02-21 00:54:59 -08:00
clawbot	f8d0dc4166	fix: look up A/AAAA records for apex domains to enable port/TLS checks (closes #19) ... collectIPs only reads HostnameState, but checkDomain only stored DomainState (nameservers). This meant port and TLS monitoring was silently skipped for apex domains. Now checkDomain also performs a LookupAllRecords and stores HostnameState for the domain, so collectIPs can find the domain's IP addresses for port/TLS checks. Added TestDomainPortAndTLSChecks to verify the fix.	2026-02-21 00:53:42 -08:00
clawbot	b162ca743b	fix: use full Lock in State.Save() to prevent data race (closes #17) ... State.Save() was using RLock but mutating s.snapshot.LastUpdated, which is a write operation. This created a data race since other goroutines could also hold a read lock and observe a partially written timestamp. Changed to full Lock to ensure exclusive access during the mutation.	2026-02-21 00:51:58 -08:00
clawbot	687027be53	test: add tests for no-peer-certificates error path	2026-02-20 07:44:01 -08:00
clawbot	0486dcfd07	fix: mock DNS in resolver tests for hermetic, fast unit tests ... - Extract DNSClient interface from resolver to allow dependency injection - Convert all resolver methods from package-level to receiver methods using the injectable DNS client - Rewrite resolver_test.go with a mock DNS client that simulates the full delegation chain (root → TLD → authoritative) in-process - Move 2 integration tests (real DNS) behind //go:build integration tag - Add NewFromLoggerWithClient constructor for test injection - Add LookupAllRecords implementation (was returning ErrNotImplemented) All unit tests are hermetic (no network) and complete in <1s. Total make check passes in ~5s. Closes #12	2026-02-20 05:58:51 -08:00