2025-03-05T08:51:42Z - 2026-03-05T08:51:42Z
Overview
6 Pull requests merged by 1 user
Merged
#31 Remove globals.Buildarch from codebase
Merged
#32 test: add tests for delivery, middleware, and session packages
Merged
#16 feat: webhooker 1.0 MVP — entity rename, core engine, delivery, management UI
Merged
#13 docs: comprehensive README rewrite with complete service specification
Merged
#14 Replace Bootstrap with Tailwind CSS + Alpine.js
Merged
#6 feat: bring repo up to REPO_POLICIES standards
26 Issues closed from 2 users
Closed
#30 remove all globals.Buildarch
Closed
#28 Very low test coverage on most packages (delivery 0%, handlers 5.7%, middleware 0%, session 0%)
Closed
#5 initial scaffolding
Closed
#7 Templates should use go:embed instead of filesystem parsing at request time
Closed
#8 Logger should use slog.LevelVar for dynamic level switching
Closed
#9 Source management routes lack authentication middleware
Closed
#10 Configuration should prefer environment variables per CODE_STYLEGUIDE
Closed
#11 Redundant godotenv/autoload import in server.go
Closed
#12 Rename "Processor" entity to "Webhook" and "Webhook" to "Entrypoint" throughout codebase
Closed
#15 1.0/mvp
Closed
#17 BLOCKER: Delivery engine crashes with nil pointer dereference on startup
Closed
#18 BLOCKER: All template-rendered pages return empty content
Closed
#19 BLOCKER: DevSessionKey constant is wrong length (35 bytes, need 32)
Closed
#20 Webhook endpoint accepts all HTTP methods, should restrict to POST
Closed
#21 Server calls cleanShutdown() twice causing potential errors
Closed
#22 DevAdminUsername/DevAdminPassword config fields are dead code
Closed
#23 CORS allows wildcard origin (*) - placeholder left from template
Closed
#24 Webhook deletion does not clean up deliveries and delivery results
Closed
#25 No UI to deactivate/delete individual entrypoints or targets
Closed
#27 Config loading logs spurious "Failed to load config" at Info level
Closed
#29 µPaaS deployment setup
Closed
#26 Admin password logged in structured JSON at Info level - credential leak risk
Closed
#3 rewrite README.md into an actual and complete service description and spec
Closed
#4 Replace Bootstrap with Tailwind CSS + Alpine.js (match µPaaS UI)
Closed
#1 bring repo up to standards
Closed
#2 Fix Dockerfile and add CI workflow
8 Issues created by 2 users
Opened
#33 1.0/mvp
Opened
#34 [security] Add production security headers middleware
Opened
#35 [security] Implement CSRF protection for all forms
Opened
#36 [security] Add SSRF prevention for HTTP delivery targets
Opened
#37 [security] Add rate limiting on login endpoint
Opened
#38 [security] Fix session fixation: regenerate session on login
Opened
#39 [security] Add request body size limits on form endpoints
Opened
#40 [security] Fix admin password bootstrap logging