secret

4 Commits

Author	SHA1	Message	Date
clawbot	31b09ea8b0	fix: pin all Docker base images by SHA256 digest check / check (push) Successful in 22s Details Pin all three FROM lines with SHA256 digests per REPO_POLICIES.md: - golangci/golangci-lint:v2.1.6@sha256:568ee1c1... - golang:1.24-alpine@sha256:8bee1901... - alpine:3.23@sha256:25109184... (was alpine:latest) Also replaced mutable 'alpine:latest' tag with 'alpine:3.23'.	2026-03-10 17:25:37 -07:00
clawbot	f8e8eec43d	refactor: use official golangci-lint image for lint stage check / check (push) Successful in 1m15s Details Restructure Dockerfile to match upaas/dnswatcher pattern: - Separate lint stage using golangci/golangci-lint:v2.1.6 image - Builder stage for tests and compilation (no lint dependency) - Add fmt-check Makefile target - Decouple test from lint in Makefile (lint runs in its own stage) - Run gofmt on all files - docker build verified passing locally	2026-03-10 12:36:19 -07:00
clawbot	9be6e2a4eb	fix: use correct checkout SHA and simplify CI workflow check / check (push) Successful in 1m1s Details The previous checkout SHA was invalid, causing immediate CI failure. Use the known-good actions/checkout v4.2.2 SHA. Simplify trigger to on: [push] to match other repos. Keep --ulimit memlock=-1:-1 for 10MB secret tests that need mlock.	2026-03-10 12:29:39 -07:00
clawbot	6be4601763	refactor: return errors from NewCLIInstance instead of panicking Change NewCLIInstance() and NewCLIInstanceWithFs() to return (*Instance, error) instead of panicking on DetermineStateDir failure. Callers in RunE contexts propagate the error. Callers in command construction (for shell completion) use log.Fatalf. Test callers use t.Fatalf. Addresses review feedback on PR #18.	2026-02-19 23:53:35 -08:00