Skip to content

Harden AWS operations and exec actions#184

Merged
yimsk merged 5 commits into
mainfrom
develop
May 5, 2026
Merged

Harden AWS operations and exec actions#184
yimsk merged 5 commits into
mainfrom
develop

Conversation

@yimsk
Copy link
Copy Markdown
Contributor

@yimsk yimsk commented May 5, 2026

Summary

  • Harden AWS operation handling, docs search privacy, and sensitive raw data redaction.
  • Fix profile-change initialization status and pagination behavior.
  • Replace safe AWS CLI exec actions with argv execution and require full dangerous confirmation tokens.
  • Remove Claude review workflows that are currently failing on Dependabot PRs.

Verification

  • go test ./internal/action ./internal/view
  • go test ./...
  • golangci-lint run
  • go build ./cmd/claws
  • Oracle blocker review: No blockers found

yimsk added 5 commits May 3, 2026 01:07
When the profile selection modal was open, awsContextReadyMsg from the
in-flight initAWSCmd was swallowed by handleModalUpdate, leaving
awsInitializing stuck at true. Process app lifecycle messages before
modal/command-mode focus so async results always update state.
Use argv execution for safe AWS CLI actions, require full dangerous confirmation tokens, and preserve multi-profile pagination loading behavior.
@yimsk yimsk merged commit 40ee108 into main May 5, 2026
11 checks passed
tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request May 7, 2026
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [github:clawscli/claws](https://github.com/clawscli/claws) | patch | `0.15.3` → `0.15.4` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>clawscli/claws (github:clawscli/claws)</summary>

### [`v0.15.4`](https://github.com/clawscli/claws/releases/tag/v0.15.4)

[Compare Source](clawscli/claws@v0.15.3...v0.15.4)

#### Changelog

- [`1ad7a57`](clawscli/claws@1ad7a57) Add gopls to dev shell
- [`ea05c51`](clawscli/claws@ea05c51) Address review feedback
- [`45b0ce4`](clawscli/claws@45b0ce4) Bound tag search fetch concurrency
- [`dcdf036`](clawscli/claws@dcdf036) Clarify pagination token filtering
- [`87d4e15`](clawscli/claws@87d4e15) Correct AI chat session docs path
- [`54e37d2`](clawscli/claws@54e37d2) Fix stuck AWS initializing status during profile change
- [`adfd5ba`](clawscli/claws@adfd5ba) Guard SageMaker training S3 URI rendering
- [`c69e666`](clawscli/claws@c69e666) Harden AWS docs search privacy
- [`6aa41e7`](clawscli/claws@6aa41e7) Harden exec actions and pagination
- [`379e4db`](clawscli/claws@379e4db) Harden safety-sensitive AWS operations
- [`c7628dc`](clawscli/claws@c7628dc) Limit pagination to token-bearing pairs
- [`bb97771`](clawscli/claws@bb97771) Merge branch 'main' into dependabot/go\_modules/gopkg.in/ini.v1-1.67.2
- [`a8285ce`](clawscli/claws@a8285ce) Merge pull request [#&#8203;180](clawscli/claws#180) from clawscli/develop
- [`f772864`](clawscli/claws@f772864) Merge pull request [#&#8203;181](clawscli/claws#181) from clawscli/develop
- [`493b81c`](clawscli/claws@493b81c) Merge pull request [#&#8203;182](clawscli/claws#182) from clawscli/dependabot/go\_modules/aws-sdk-98bf9e9202
- [`97f5f31`](clawscli/claws@97f5f31) Merge pull request [#&#8203;183](clawscli/claws#183) from clawscli/dependabot/go\_modules/gopkg.in/ini.v1-1.67.2
- [`40ee108`](clawscli/claws@40ee108) Merge pull request [#&#8203;184](clawscli/claws#184) from clawscli/develop
- [`48fc777`](clawscli/claws@48fc777) Normalize VHS shell prompts
- [`8df4fa6`](clawscli/claws@8df4fa6) Normalize genimports path tests
- [`9adfd42`](clawscli/claws@9adfd42) Preserve sensitive raw data key names
- [`7a5a6d8`](clawscli/claws@7a5a6d8) Redact sensitive AI raw resource data
- [`b0fa729`](clawscli/claws@b0fa729) Refine AI raw data redaction
- [`3898f5e`](clawscli/claws@3898f5e) Remove Claude code review workflows
- [`8eaad51`](clawscli/claws@8eaad51) Run VHS demos with host binary
- [`ddd062f`](clawscli/claws@ddd062f) Simplify enrichment status rendering
- [`0c83fd1`](clawscli/claws@0c83fd1) Track IAM policy enrichment failures
- [`55d033d`](clawscli/claws@55d033d) Track IAM role enrichment failures
- [`118836a`](clawscli/claws@118836a) Track IAM user enrichment failures
- [`dca965a`](clawscli/claws@dca965a) Track S3 enrichment failures
- [`f6b1043`](clawscli/claws@f6b1043) Update Go dependencies
- [`dd3ae9c`](clawscli/claws@dd3ae9c) Use bus-qualified EventBridge rule IDs
- [`f2854d5`](clawscli/claws@f2854d5) deps: bump gopkg.in/ini.v1 from 1.67.1 to 1.67.2
- [`5775c5c`](clawscli/claws@5775c5c) deps: bump the aws-sdk group with 5 updates

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever MR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJSZW5vdmF0ZSBCb3QiLCJhdXRvbWF0aW9uOmJvdC1hdXRob3JlZCIsImRlcGVuZGVuY3ktdHlwZTo6cGF0Y2giXX0=-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant