2026-03-22 - 2026-09-22
Обзор
5 запросов на слияние приняты 2 пользователями
Принято
#29 Update golangci-lint to v2.12.2 with canonical config
Принято
#28 Add .editorconfig (closes #27)
Принято
#26 scripts-to-rule-them-all
Принято
#25 TODO
Принято
#21 ci: add Gitea Actions workflow for make check
1 запрос на слияние предложены 1 пользователем
Предложено
#53 Make script/test fail on flaky failures and enable -race (closes #32)
4 задач закрыто от 1 пользователем
Закрыто
#45 script/bootstrap installs golangci-lint unpinned, so local lint diverges from CI
Закрыто
#30 Adopt canonical .golangci.yml and golangci-lint v2.12.2
Закрыто
#31 Decision needed: three commits on main carry vendor advertising trailers
Закрыто
#27 Add .editorconfig
26 задач создано 1 пользователем
Открытые
#27 Add .editorconfig
Открытые
#30 Adopt canonical .golangci.yml and golangci-lint v2.12.2
Открытые
#31 Decision needed: three commits on main carry vendor advertising trailers
Открытые
#32 script/test silently passes on flaky failures, and runs without -race or -timeout
Открытые
#33 Critical: secret rm .. deletes the entire vault; rm/mv/import skip name validation
Открытые
#34 No file locking and no atomic writes: concurrent or interrupted operations corrupt the vault
Открытые
#35 memguard lifecycle is not wired up: Ctrl-C and error exits leave key material in locked memory unwiped
Открытые
#36 KeychainData holds the age key passphrase as a plain string through JSON marshalling
Открытые
#37 GetSecretVersion copies decrypted secrets out of locked memory into plain []byte
Открытые
#38 age identity .String() creates unprotected copies of private keys at six call sites
Открытые
#39 No confirmation prompt on any destructive operation
Открытые
#40 .gitignore does not exclude secrets, and .dockerignore does not exclude .git
Открытые
#41 Cobra prints full usage on internal failures, burying the actual error
Открытые
#42 PGPUnlocker.GetID panics on corrupt metadata, and setMnemonicEnv re-exports the mnemonic
Открытые
#43 Go module path is git.eeqj.de/sneak/secret, policy requires sneak.berlin/go/secret
Открытые
#44 Makefile hardcodes a personal remote DOCKER_HOST, breaking make docker for everyone else
Открытые
#45 script/bootstrap installs golangci-lint unpinned, so local lint diverges from CI
Открытые
#46 README missing four required sections; TODO.md is stale and describes completed work as pending
Открытые
#47 Error messages leak internals and offer no recovery path for corrupted key files
Открытые
#48 CreatePGPUnlocker leaves a partial unlocker directory on disk when fingerprint resolution fails
Открытые
#49 Tests assert on error message fragments, never on sentinel identity — error-handling regressions pass silently
Открытые
#50 Darwin-only code is never compiled, linted, or tested by CI, including both hardware-backed unlockers
Открытые
#51 checkUnlockerExists fails open: an unenumerable unlockers.d reports "no duplicate" and permits a duplicate unlocker
Открытые
#52 Test suite cannot meet the 20s policy budget once -race is enabled: internal/cli 100MB boundary tests
Открытые
#54 script/cibuild can report a cached green: docker build serves RUN make check layers from cache
Открытые
#55 Run all linting in Docker via Dockerfile.lint + script/lint