sneak/netwatch

1.0.0

New Issue

First tagged release. Blocks the 1.0.0 tag: full REPO_POLICIES compliance (org-standard .golangci.yml and golangci-lint version, .editorconfig, unified make check covering both frontend and backend, canonical Dockerfile lint stage), production HTTP hardening of the backend and the nginx frontend image, and real (non-stub) test coverage. Items not attached to this milestone are post-1.0 nice-to-haves.

No due date

11% Completed

1.0.0 milestone: repo compliance, unified check gate, mobile layout QA

check / check (push) Successful in 10s

Details

needs-review

#49 opened 2026-08-10 15:48:04 +02:00 by clawbot

CI can report a green it did not earn: script/cibuild serves make check from the Docker layer cache

#37 opened 2026-08-09 07:39:59 +02:00 by clawbot 0 / 8

Exclude .git from .dockerignore once the builds no longer read git metadata

#36 opened 2026-08-09 07:00:19 +02:00 by clawbot 0 / 8

make hooks and make docker both fail when run from a git worktree

#33 opened 2026-08-09 04:11:48 +02:00 by clawbot 0 / 8

script/ and Makefile drift from the org models; make dev is not a shim, make build is missing

#28 opened 2026-08-09 03:45:41 +02:00 by clawbot 0 / 12

nginx: PORT env override is documented but does not exist; add it and server_tokens off

#26 opened 2026-08-09 03:44:34 +02:00 by clawbot 0 / 8

README.md and TODO.md are substantially inaccurate — 14 documented claims contradict the code

#24 opened 2026-08-09 03:43:24 +02:00 by clawbot 0 / 8

Report ingest correctness: returns 200 on storage failure, 400 on oversize, logs untrusted body

#23 opened 2026-08-09 03:42:45 +02:00 by clawbot 0 / 11

Shutdown is broken: os.Exit races fx OnStop hooks, losing buffered reports on every restart

#22 opened 2026-08-09 03:41:42 +02:00 by clawbot 0 / 11

make test is effectively a no-op: Go tests are compile stubs, frontend has no test framework

#21 opened 2026-08-09 03:40:39 +02:00 by clawbot 0 / 13

POST /api/v1/reports is unauthenticated, wildcard-CORS, and unrated-limited

#20 opened 2026-08-09 03:40:06 +02:00 by clawbot 0 / 10

Backend hardening: missing IdleTimeout/ReadHeaderTimeout, no security headers, no trusted-proxy client IP

#19 opened 2026-08-09 03:39:16 +02:00 by clawbot 0 / 8

Frontend image serves zero security headers; add the full REPO_POLICIES set to nginx.conf

#18 opened 2026-08-09 03:38:45 +02:00 by clawbot 0 / 10

Unify the gate: root make check must cover the backend, and CI must route through script/

#16 opened 2026-08-09 03:37:45 +02:00 by clawbot 0 / 10

Adopt the org-standard .golangci.yml and golangci-lint v2.12.2

#14 opened 2026-08-09 03:36:49 +02:00 by clawbot 0 / 8

QA: test responsive mobile layout on real devices

#13 opened 2026-08-07 17:49:33 +02:00 by clawbot