clawbot 85729d9181 fix: update Dockerfile to Go 1.25.4 and resolve gosec lint findings ...

- Update Dockerfile base image from golang:1.24-alpine to golang:1.25.4-alpine
  (pinned by sha256 digest) to match go.mod requirement of go >= 1.25.4
- Fix gosec G703 (path traversal) false positives by adding filepath.Clean()
  at call sites with nolint annotations for internally-constructed paths
- Fix gosec G704 (SSRF) false positive with nolint annotation; URL is already
  validated by validateURL() which checks scheme, resolves DNS, and blocks
  private IPs
- All make check passes clean (lint + tests)

2026-02-25 05:44:49 -08:00

..

testdata

Add failing test for AVIF decoding

2026-01-08 13:09:40 -08:00

cache_test.go

Add type-safe hash types for cache storage

2026-01-08 16:55:20 -08:00

cache.go

fix: resolve all golangci-lint errors

2026-02-25 19:58:37 +07:00

divzero_test.go

fix: guard against division by zero when fetchBytes is 0

2026-02-08 15:59:51 -08:00

fetcher.go

fix: update Dockerfile to Go 1.25.4 and resolve gosec lint findings

2026-02-25 05:44:49 -08:00

imgcache.go

fix: propagate AllowHTTP to SourceURL() scheme selection

2026-02-08 16:34:42 -08:00

magic_test.go

Add magic byte detection for image format validation

2026-01-08 03:35:29 -08:00

magic.go

Add magic byte detection for image format validation

2026-01-08 03:35:29 -08:00

mock_fetcher.go

Add mock fetcher and service tests for imgcache

2026-01-08 07:39:18 -08:00

module.go

Add type-safe hash types for cache storage

2026-01-08 16:55:20 -08:00

negative_cache_test.go

fix: check negative cache in Service.Get() before fetching upstream

2026-02-08 16:02:33 -08:00

processor_test.go

Suppress verbose vips logging output

2026-01-08 16:13:52 -08:00

processor.go

fix: resolve all golangci-lint errors

2026-02-25 19:58:37 +07:00

service_test.go

Add failing tests for ETag, HEAD requests, and conditional requests

2026-01-08 10:06:18 -08:00

service.go

fix: resolve all golangci-lint errors

2026-02-25 19:58:37 +07:00

signature_query_test.go

fix: encode source query in GenerateSignedURL to avoid malformed URLs

2026-02-08 15:58:32 -08:00

signature_test.go

Fix formatting in fetcher and signature tests

2026-01-08 03:36:00 -08:00

signature.go

fix: encode source query in GenerateSignedURL to avoid malformed URLs

2026-02-08 15:58:32 -08:00

sourceurl_test.go

fix: propagate AllowHTTP to SourceURL() scheme selection

2026-02-08 16:34:42 -08:00

stats_test.go

fix: correct Stats() to scan only hit/miss counts, compute HitRate properly

2026-02-08 15:59:27 -08:00

storage_test.go

Add type-safe hash types for cache storage

2026-01-08 16:55:20 -08:00

storage.go

fix: update Dockerfile to Go 1.25.4 and resolve gosec lint findings

2026-02-25 05:44:49 -08:00

testutil_test.go

Add type-safe hash types for cache storage

2026-01-08 16:55:20 -08:00

urlparser_test.go

Add failing tests for input dimension and path traversal validation

2026-01-08 08:48:11 -08:00

urlparser.go

Implement max input dimensions and path traversal validation

2026-01-08 08:50:18 -08:00

whitelist_test.go

Implement host whitelist for source domains

2026-01-08 03:00:53 -08:00

whitelist.go

Implement host whitelist for source domains

2026-01-08 03:00:53 -08:00