1.0.0

New Issue

First tagged release. Tracks every remaining commit-sized work unit required before pixa can be tagged v1.0.0: documented-but-unimplemented behavior, security and robustness hardening, and the docs/test work needed to call the image proxy flow production-ready. Each issue carries its own definition of done.

No due date

100% Completed

0 Open 82 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

critical

merge-ready

needs-checks

needs-rebase

needs-review

needs-rework

Project

All projects No project

Author

All users

Assignee

Assigned to nobody Assigned to anybody

clawbot sneak (Jeffrey Paul)

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

Give the pixad user a fixed uid and gid outside the login range

#151

by clawbot was closed 2026-09-29 04:44:52 +02:00

2

README: trusted_proxies advice and signature padding mislead operators

#150

by clawbot was closed 2026-09-29 06:05:46 +02:00

1

/v1/image/ serves an empty fit= as cover instead of answering 400

#139

by clawbot was closed 2026-09-28 18:07:12 +02:00

2

/v1/image/ serves an invalid q as the default instead of answering 400

#134

by clawbot was closed 2026-09-28 17:46:49 +02:00

2

An unknown PIXA_ environment variable is ignored instead of aborting startup

#133

by clawbot was closed 2026-09-28 16:12:58 +02:00

2

script/docker-smoke: the comment on --health-interval describes old Docker behavior

#132

by clawbot was closed 2026-09-28 15:48:53 +02:00

1

Start on a fresh upaas volume, and a README section on running under upaas

#129

by clawbot was closed 2026-09-28 15:12:49 +02:00

2

Every setting can be given as an environment variable

#128

by clawbot was closed 2026-09-28 13:46:56 +02:00

2

Remove unsafe-inline from the Content-Security-Policy: move inline handlers and runtime Tailwind styles into served assets

#125

by clawbot was closed 2026-10-04 18:58:41 +02:00

2

next -> main (1.0.0 milestone) merge-ready

#118

by clawbot was merged 2026-09-29 03:01:06 +02:00

main

next

Prove the Docker image runs: HEALTHCHECK instruction and a make docker-smoke target that starts the image and checks the healthcheck

#111

by clawbot was closed 2026-09-28 12:06:30 +02:00

2

Docker image bakes the example config with a placeholder signing key; take the key from the environment and refuse the placeholder

#110

by clawbot was closed 2026-09-21 21:59:25 +02:00

2

Prove the Docker lint gate actually lints: defeat layer cache + negative control

#108

by clawbot was closed 2026-09-05 11:32:53 +02:00

1

Add hash-pinned Dockerfile.lint and make script/lint Docker-only

#107

by clawbot was closed 2026-09-05 11:32:53 +02:00

1

TODO.md documents a branch-from-main workflow that no longer matches the next branching model

#106

by clawbot was closed 2026-09-21 19:59:52 +02:00

Run all linting in Docker via Dockerfile.lint + script/lint

#104

by clawbot was closed 2026-09-28 14:27:36 +02:00

3

Eviction loop is not context-cancellable; shutdown ignores its deadline

#102

by clawbot was closed 2026-10-04 09:24:42 +02:00

3

script/cibuild can report a green it did not earn: docker layer cache can skip make check entirely

#101

by clawbot was closed 2026-10-04 03:58:37 +02:00

4

Markdown is never formatted: script/fmt covers only Go, and no prettier config exists

#100

by clawbot was closed 2026-10-05 04:24:47 +02:00

3

Port is not overridable with the PORT environment variable

#99

by clawbot was closed 2026-09-28 13:47:03 +02:00

1