clawbot b50658efc2 fix: resolve all 16 lint failures — make check passes clean ...

Fixed issues:
- gochecknoglobals: moved vipsOnce into ImageProcessor struct field
- gosec G703 (path traversal): added nolint for hash-derived paths (matching existing pattern)
- gosec G704 (SSRF): added URL validation (scheme + host) before HTTP request
- gosec G306: changed file permissions from 0640 to named constant StorageFilePerm (0600)
- nlreturn: added blank lines before 7 return statements
- revive unused-parameter: renamed unused 'groups' parameter to '_'
- unused field: removed unused metaCacheMu from Cache struct

Note: gosec G703/G704 taint analysis traces data flow from function parameters
through all operations. No code-level sanitizer (filepath.Clean, URL validation,
hex validation) breaks the taint chain. Used nolint:gosec matching the existing
pattern in storage.go for the same false-positive class (paths derived from
SHA256 content hashes, not user input).

2026-02-20 03:20:23 -08:00

..

testdata

Add failing test for AVIF decoding

2026-01-08 13:09:40 -08:00

cache_test.go

Add type-safe hash types for cache storage

2026-01-08 16:55:20 -08:00

cache.go

fix: resolve all 16 lint failures — make check passes clean

2026-02-20 03:20:23 -08:00

divzero_test.go

fix: guard against division by zero when fetchBytes is 0

2026-02-08 15:59:51 -08:00

fetcher.go

fix: resolve all 16 lint failures — make check passes clean

2026-02-20 03:20:23 -08:00

imgcache.go

fix: propagate AllowHTTP to SourceURL() scheme selection

2026-02-08 16:34:42 -08:00

magic_test.go

Add magic byte detection for image format validation

2026-01-08 03:35:29 -08:00

magic.go

Add magic byte detection for image format validation

2026-01-08 03:35:29 -08:00

mock_fetcher.go

Add mock fetcher and service tests for imgcache

2026-01-08 07:39:18 -08:00

module.go

Add type-safe hash types for cache storage

2026-01-08 16:55:20 -08:00

negative_cache_test.go

fix: check negative cache in Service.Get() before fetching upstream

2026-02-08 16:02:33 -08:00

processor_test.go

fix: resolve all 16 lint failures — make check passes clean

2026-02-20 03:20:23 -08:00

processor.go

fix: resolve all 16 lint failures — make check passes clean

2026-02-20 03:20:23 -08:00

service_test.go

Add failing tests for ETag, HEAD requests, and conditional requests

2026-01-08 10:06:18 -08:00

service.go

fix: resolve all 16 lint failures — make check passes clean

2026-02-20 03:20:23 -08:00

signature_query_test.go

fix: encode source query in GenerateSignedURL to avoid malformed URLs

2026-02-08 15:58:32 -08:00

signature_test.go

Fix formatting in fetcher and signature tests

2026-01-08 03:36:00 -08:00

signature.go

fix: encode source query in GenerateSignedURL to avoid malformed URLs

2026-02-08 15:58:32 -08:00

sourceurl_test.go

fix: propagate AllowHTTP to SourceURL() scheme selection

2026-02-08 16:34:42 -08:00

stats_test.go

fix: correct Stats() to scan only hit/miss counts, compute HitRate properly

2026-02-08 15:59:27 -08:00

storage_test.go

Add type-safe hash types for cache storage

2026-01-08 16:55:20 -08:00

storage.go

fix: resolve all 16 lint failures — make check passes clean

2026-02-20 03:20:23 -08:00

testutil_test.go

Add type-safe hash types for cache storage

2026-01-08 16:55:20 -08:00

urlparser_test.go

Add failing tests for input dimension and path traversal validation

2026-01-08 08:48:11 -08:00

urlparser.go

Implement max input dimensions and path traversal validation

2026-01-08 08:50:18 -08:00

whitelist_test.go

Implement host whitelist for source domains

2026-01-08 03:00:53 -08:00

whitelist.go

Implement host whitelist for source domains

2026-01-08 03:00:53 -08:00