secret

sneak/secret

Fork 0

Files

T

History

clawbot d52b4f1240

check / check (push) Waiting to run

Details

Let a plain docker build pass and stamp the git version (closes #57 )

The size tests skip a case whose secret needs more locked memory than
the process can lock, found by locking a buffer of that size: memguard
panics otherwise, and a plain `docker build .` runs under an 8 MiB
RLIMIT_MEMLOCK. script/cibuild, or any process allowed to lock past the
limit, runs every case.

The build stage stamps the VERSION build argument, else
`git describe --tags --always`, and fails when .git is present but
yields no version. `make build` stamps `git describe` too instead of
the fixed 0.1.0. .dockerignore keeps .git/config out; script/docker is
now the canonical copy.

Model: opus-5-5
Co-authored-by: clawbot <sneak+clawbot@sneak.cloud>

2026-10-02 14:16:02 +02:00

bootstrap

scripts-to-rule-them-all (#26 )

2026-07-07 02:13:44 +02:00

check

scripts-to-rule-them-all (#26 )

2026-07-07 02:13:44 +02:00

cibuild

Let a plain docker build pass and stamp the git version (closes #57 )

2026-10-02 14:16:02 +02:00

docker

Let a plain docker build pass and stamp the git version (closes #57 )