Issues - netwatch - git.eeqj.de

sneak/netwatch

Labels Milestones New Issue

CI can report a green it did not earn: script/cibuild serves make check from the Docker layer cache

#37 opened 2026-08-09 07:39:59 +02:00 by clawbot 1.0.0 0 / 8

Exclude .git from .dockerignore once the builds no longer read git metadata

#36 opened 2026-08-09 07:00:19 +02:00 by clawbot 1.0.0 0 / 8

golangci config drift guard: failure message loops the operator when the org standard legitimately updates

#34 opened 2026-08-09 04:25:53 +02:00 by clawbot 0 / 9

make hooks and make docker both fail when run from a git worktree

#33 opened 2026-08-09 04:11:48 +02:00 by clawbot 1.0.0 0 / 8

Node deprecation warning DEP0205 emitted on every frontend build

#32 opened 2026-08-09 03:49:12 +02:00 by clawbot 0 / 6

Decision needed: repo layout does not match the canonical structure, and backend/ duplicates 7 repo-level files

#30 opened 2026-08-09 03:46:54 +02:00 by clawbot

src/main.js: 1262-line monolith with innerHTML injection sinks, unfrozen CONFIG, and duplicated logic

#29 opened 2026-08-09 03:46:19 +02:00 by clawbot 0 / 10

script/ and Makefile drift from the org models; make dev is not a shim, make build is missing

#28 opened 2026-08-09 03:45:41 +02:00 by clawbot 1.0.0 0 / 12

Backend observability: fx logs bypass slog, Identify() is dead, Sentry/Prometheus config is parsed but unwired

#27 opened 2026-08-09 03:45:07 +02:00 by clawbot 0 / 9

nginx: PORT env override is documented but does not exist; add it and server_tokens off

#26 opened 2026-08-09 03:44:34 +02:00 by clawbot 1.0.0 0 / 8

Decision needed: the backend is not connected to anything — does it ship in 1.0?

#25 opened 2026-08-09 03:43:57 +02:00 by clawbot

README.md and TODO.md are substantially inaccurate — 14 documented claims contradict the code

#24 opened 2026-08-09 03:43:24 +02:00 by clawbot 1.0.0 0 / 8

Report ingest correctness: returns 200 on storage failure, 400 on oversize, logs untrusted body

#23 opened 2026-08-09 03:42:45 +02:00 by clawbot 1.0.0 0 / 11

Shutdown is broken: os.Exit races fx OnStop hooks, losing buffered reports on every restart

#22 opened 2026-08-09 03:41:42 +02:00 by clawbot 1.0.0 0 / 11

make test is effectively a no-op: Go tests are compile stubs, frontend has no test framework

#21 opened 2026-08-09 03:40:39 +02:00 by clawbot 1.0.0 0 / 13

POST /api/v1/reports is unauthenticated, wildcard-CORS, and unrated-limited

#20 opened 2026-08-09 03:40:06 +02:00 by clawbot 1.0.0 0 / 10

Backend hardening: missing IdleTimeout/ReadHeaderTimeout, no security headers, no trusted-proxy client IP

#19 opened 2026-08-09 03:39:16 +02:00 by clawbot 1.0.0 0 / 8

Frontend image serves zero security headers; add the full REPO_POLICIES set to nginx.conf

#18 opened 2026-08-09 03:38:45 +02:00 by clawbot 1.0.0 0 / 10

Rework Dockerfile.backend to the mandated Go multistage lint-stage pattern

#17 opened 2026-08-09 03:38:14 +02:00 by clawbot 1.0.0 0 / 11

Unify the gate: root make check must cover the backend, and CI must route through script/

#16 opened 2026-08-09 03:37:45 +02:00 by clawbot 1.0.0 0 / 10

1 2