secret

8 Commits

Author	SHA1	Message	Date
clawbot	044ad92feb	fix: add darwin build constraints to Objective-C source files check / check (push) Successful in 22s Details Add //go:build darwin to secure_enclave.m and secure_enclave.h so Go ignores them on non-darwin platforms. Without this, the lint stage fails on Linux with 'Objective-C source files not allowed when not using cgo or SWIG' because the !darwin stub (macse_stub.go) doesn't use CGO.	2026-03-14 17:54:41 -07:00
clawbot	386baaea70	fix: include .golangci.yml in Docker build context	2026-03-14 17:54:41 -07:00
clawbot	8edc629dd6	fix: add fmt-check to make check prerequisites REPO_POLICIES requires make check prereqs to include test, lint, and fmt-check.	2026-03-14 17:54:41 -07:00
clawbot	59839309b3	fix: use digest-only FROM syntax (no tags) Remove tags from FROM lines — use image@sha256:digest only, matching the upaas pattern. tag@sha256 syntax is invalid.	2026-03-14 17:54:41 -07:00
clawbot	66a390d685	fix: pin all Docker base images by SHA256 digest Pin all three FROM lines with SHA256 digests per REPO_POLICIES.md: - golangci/golangci-lint:v2.1.6@sha256:568ee1c1... - golang:1.24-alpine@sha256:8bee1901... - alpine:3.23@sha256:25109184... (was alpine:latest) Also replaced mutable 'alpine:latest' tag with 'alpine:3.23'.	2026-03-14 17:54:41 -07:00
clawbot	7b84aa345f	refactor: use official golangci-lint image for lint stage Restructure Dockerfile to match upaas/dnswatcher pattern: - Separate lint stage using golangci/golangci-lint:v2.1.6 image - Builder stage for tests and compilation (no lint dependency) - Add fmt-check Makefile target - Decouple test from lint in Makefile (lint runs in its own stage) - Run gofmt on all files - docker build verified passing locally	2026-03-14 17:54:41 -07:00
clawbot	a8ce1ff7c8	fix: use correct checkout SHA and simplify CI workflow The previous checkout SHA was invalid, causing immediate CI failure. Use the known-good actions/checkout v4.2.2 SHA. Simplify trigger to on: [push] to match other repos. Keep --ulimit memlock=-1:-1 for 10MB secret tests that need mlock.	2026-03-14 17:54:41 -07:00
clawbot	6be4601763	refactor: return errors from NewCLIInstance instead of panicking Change NewCLIInstance() and NewCLIInstanceWithFs() to return (*Instance, error) instead of panicking on DetermineStateDir failure. Callers in RunE contexts propagate the error. Callers in command construction (for shell completion) use log.Fatalf. Test callers use t.Fatalf. Addresses review feedback on PR #18.	2026-02-19 23:53:35 -08:00