ff4de855cc
Standalone plugins now build against git.dev.alexdunmow.com/block/pluginsdk. Check 2c requires a pluginsdk module require (rule missing-pluginsdk-require) and enforces its version against the CMS anchor (rule pluginsdk-version-mismatch) once the CMS migrates; a coexisting block/core require stays allowed (calcomblock keeps core for captcha). - check_sdkboundaries.go: degrade the 2c OK message gracefully when the pluginsdk version anchor is empty (transition period) — omit the version clause instead of printing "SDK version ". - check_rbac.go: document pluginsdk in the definitions-only module comment. - plugin_sdk_versions_test.go: retarget fixtures to pluginsdk; add cases for missing-pluginsdk-require, pluginsdk-version-mismatch, a forbidden core replace directive, and an allowed coexisting core require. - lint_test.go: synthesized plugin repos now require pluginsdk (replace- directive case replaces pluginsdk). - registry_test.go: add checks 30 and 31 to the canonical order (were added to the registry without updating this test). - golden: regenerate — check count 32 -> 34 (checks 30/31 SKIP in fixtures). - README.md: describe 2c as the pluginsdk boundary. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
14 lines
790 B
Plaintext
14 lines
790 B
Plaintext
check-safety FIXTURE_DIR
|
|
FAIL 1 1 secret env var read(s) outside config.Load() — secrets must flow through Config → DI
|
|
internal/service/handler.go:17 os.Getenv("JWT_SECRET")
|
|
FAIL 2c 1 CMS backend go.mod violation(s)
|
|
FIXTURE_DIR/go.mod [missing-go-mod] missing go.mod
|
|
FAIL 14 1 raw SQL statement(s) found outside sqlc/Bob
|
|
internal/service/handler.go:22 SELECT id, name FROM users WHERE active = true
|
|
FAIL 15 1 err.Error() leak(s) to HTTP clients — log via slog.Error() and return a user-friendly message
|
|
internal/service/handler.go:27 http.Error(w, err.Error(), ...) — leaks internal error
|
|
FAIL 17 1 TODO marker(s) found — ship explicit behavior, not placeholders
|
|
internal/service/handler.go:14 // TODO: add proper initialisation
|
|
|
|
34 checks: 14 ok 15 skip 5 fail -> FAIL
|