56cca5b4b8
The cms↔pluginsdk bn-chrome byte-compare no longer applies: pluginsdk deleted templates/bn at v0.2.0, so cms's copy is host-only and authoritative. Remove check_templatesync.go, drop check 31 from the registry-order test, and regenerate golden snapshots (34→33 checks). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
14 lines
790 B
Plaintext
14 lines
790 B
Plaintext
check-safety FIXTURE_DIR
|
|
FAIL 1 1 secret env var read(s) outside config.Load() — secrets must flow through Config → DI
|
|
internal/service/handler.go:17 os.Getenv("JWT_SECRET")
|
|
FAIL 2c 1 CMS backend go.mod violation(s)
|
|
FIXTURE_DIR/go.mod [missing-go-mod] missing go.mod
|
|
FAIL 14 1 raw SQL statement(s) found outside sqlc/Bob
|
|
internal/service/handler.go:22 SELECT id, name FROM users WHERE active = true
|
|
FAIL 15 1 err.Error() leak(s) to HTTP clients — log via slog.Error() and return a user-friendly message
|
|
internal/service/handler.go:27 http.Error(w, err.Error(), ...) — leaks internal error
|
|
FAIL 17 1 TODO marker(s) found — ship explicit behavior, not placeholders
|
|
internal/service/handler.go:14 // TODO: add proper initialisation
|
|
|
|
33 checks: 14 ok 14 skip 5 fail -> FAIL
|