{"record":{"id":"b26e15ca93fa60ae","repo":"JuliusBrussee/caveman","slug":"secure-sqlite-sidecar-q-w","errorCode":null,"errorMessage":"secure sqlite sidecar %q: %w","messagePattern":"secure sqlite sidecar %q: %w","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"engine/ccr/store_sqlite.go","lineNumber":236,"sourceCode":"\t\treturn \"\", fmt.Errorf(\"resolve sqlite parent %q: %w\", parent, err)\n\t}\n\tparentInfo, err := os.Stat(resolvedParent)\n\tif err != nil {\n\t\treturn \"\", fmt.Errorf(\"inspect sqlite parent %q: %w\", resolvedParent, err)\n\t}\n\tif !parentInfo.IsDir() {\n\t\treturn \"\", fmt.Errorf(\"sqlite parent %q must be a directory\", resolvedParent)\n\t}\n\tif err := validateSQLiteParentSecurity(resolvedParent, parentInfo); err != nil {\n\t\treturn \"\", err\n\t}\n\tcanonicalPath := filepath.Join(resolvedParent, filepath.Base(path))\n\tif err := secureSQLiteFile(canonicalPath, true); err != nil {\n\t\treturn \"\", fmt.Errorf(\"secure sqlite %q: %w\", canonicalPath, err)\n\t}\n\tfor _, suffix := range []string{\"-wal\", \"-shm\"} {\n\t\tif err := secureSQLiteFile(canonicalPath+suffix, false); err != nil {\n\t\t\treturn \"\", fmt.Errorf(\"secure sqlite sidecar %q: %w\", canonicalPath+suffix, err)\n\t\t}\n\t}\n\treturn canonicalPath, nil\n}\n\nfunc secureSQLiteFiles(path string) error {\n\tif err := PrepareSQLitePath(path); err != nil {\n\t\treturn err\n\t}\n\treturn nil\n}\n\nfunc secureSQLiteFile(path string, create bool) error {\n\tinfo, err := os.Lstat(path)\n\tif errors.Is(err, os.ErrNotExist) && create {\n\t\tfile, createErr := os.OpenFile(path, os.O_CREATE|os.O_EXCL|os.O_RDWR, 0o600)\n\t\tif createErr == nil {\n\t\t\treturn file.Close()","sourceCodeStart":218,"sourceCodeEnd":254,"githubUrl":"https://github.com/JuliusBrussee/caveman/blob/27d5a3981a347890211bb1bf2439e5c821a63bc9/engine/ccr/store_sqlite.go#L218-L254","documentation":"Error \"secure sqlite sidecar %q: %w\" thrown in JuliusBrussee/caveman.","triggerScenarios":"Thrown at engine/ccr/store_sqlite.go:236 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Fix securing (chmod) of the sqlite sidecar file."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"27d5a3981a347890211bb1bf2439e5c821a63bc9","analyzedAt":"2026-08-15T09:26:11.751Z","schemaVersion":2},"datasetVersion":"2026-08-15T22:17:37.221Z"}