clawbot 61238e4071 Refuse a file entry with no hash when loading a manifest (closes #194) ...

Loading accepted a file entry whose hashes list was empty. check and
fetch then failed the file as a hash mismatch, and freshen left it out
of the rewritten manifest without a word.

NewManifestFromReader now refuses such an entry, naming its path, after
checking the path itself. freshen's addExistingToBuilder returns an
error for an entry with no hash instead of skipping it. The file entry
table in docs/FORMAT.md says readers reject an entry with none.

Model: opus-5-5

2026-10-13 18:04:47 +02:00

..

testdata

Raise Go to the latest release, update dependencies, use the standard library uuid, add a vulnerability check (closes #102)

2026-10-06 20:26:15 +02:00

check.go

Log failed files at error level so check -q shows them (closes #195)

2026-10-13 16:46:13 +02:00

entry_test.go

Log failed files at error level so check -q shows them (closes #195)

2026-10-13 16:46:13 +02:00

entry.go

Limit how much fetch and check read for a manifest or a file (closes #168)

2026-10-07 14:25:45 +02:00

errmsg_test.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

export_test.go

Record file mode in the manifest, 0000 unless asked (closes #161)

2026-10-06 11:43:18 +02:00

export.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

fetch_test.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

fetch.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

freshen_test.go

Refuse a file entry with no hash when loading a manifest (closes #194)

2026-10-13 18:04:47 +02:00

freshen.go

Refuse a file entry with no hash when loading a manifest (closes #194)

2026-10-13 18:04:47 +02:00

gen.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

list.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

manifest_loader.go

Resolve check and freshen paths against the manifest's directory (closes #177)

2026-10-07 17:28:38 +02:00

mfer.go

Read options after the path or URL and refuse a second argument (closes #196)

2026-10-13 14:21:56 +02:00

mtime.go

Update golangci-lint to v2.12.2 with canonical config (closes #60)

2026-08-10 16:06:12 +02:00

pipe_test.go

Read only regular files in gen, freshen and check (closes #189)

2026-10-13 16:39:09 +02:00

signing_test.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

signing.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00