pixa/internal
clawbot 85729d9181
All checks were successful
check / check (push) Successful in 1m41s
fix: update Dockerfile to Go 1.25.4 and resolve gosec lint findings
- Update Dockerfile base image from golang:1.24-alpine to golang:1.25.4-alpine
  (pinned by sha256 digest) to match go.mod requirement of go >= 1.25.4
- Fix gosec G703 (path traversal) false positives by adding filepath.Clean()
  at call sites with nolint annotations for internally-constructed paths
- Fix gosec G704 (SSRF) false positive with nolint annotation; URL is already
  validated by validateURL() which checks scheme, resolves DNS, and blocks
  private IPs
- All make check passes clean (lint + tests)
2026-02-25 05:44:49 -08:00
..
config fix: update Dockerfile to Go 1.25.4 and resolve gosec lint findings 2026-02-25 05:44:49 -08:00
database Add mock fetcher and service tests for imgcache 2026-01-08 07:39:18 -08:00
encurl Add 'Never' expiry option for encrypted URLs 2026-01-08 11:08:11 -08:00
globals Remove Buildarch from ldflags, use runtime.GOARCH instead 2026-01-08 12:38:24 -08:00
handlers Add type-safe hash types for cache storage 2026-01-08 16:55:20 -08:00
healthcheck Rename unused parameters to _ to satisfy linter 2026-01-08 02:27:45 -08:00
imgcache fix: update Dockerfile to Go 1.25.4 and resolve gosec lint findings 2026-02-25 05:44:49 -08:00
logger fix: resolve all golangci-lint errors 2026-02-25 19:58:37 +07:00
middleware Fix logging: add response_bytes to middleware, cache_key to handler 2026-01-08 13:05:10 -08:00
seal Add seal package for authenticated encryption 2026-01-08 07:37:53 -08:00
server Change encrypted URL format to /v1/e/{token}/img.{ext} 2026-01-08 16:14:01 -08:00
session Add session package for encrypted cookie management 2026-01-08 07:37:58 -08:00
static Add static files and HTML templates for web UI 2026-01-08 07:38:09 -08:00
templates Add AVIF option to URL generator 2026-01-08 13:12:51 -08:00