misc nitpicks (see commits)

README.md

 # Knot Resolver
 
-[![Build Status](https://gitlab.labs.nic.cz/knot/knot-resolver/badges/master/pipeline.svg?x)](https://gitlab.labs.nic.cz/knot/knot-resolver/commits/master)
-[![Coverage Status](https://gitlab.labs.nic.cz/knot/knot-resolver/badges/master/coverage.svg?x)](https://knot.pages.labs.nic.cz/knot-resolver/)
+[![Build Status](https://gitlab.labs.nic.cz/knot/knot-resolver/badges/nightly/pipeline.svg?x)](https://gitlab.labs.nic.cz/knot/knot-resolver/commits/nightly)
+[![Coverage Status](https://gitlab.labs.nic.cz/knot/knot-resolver/badges/nightly/coverage.svg?x)](https://knot.pages.labs.nic.cz/knot-resolver/)
 [![Coverity](https://img.shields.io/coverity/scan/3912.svg)](https://scan.coverity.com/projects/3912)
 [![Documentation Status](https://readthedocs.org/projects/knot-resolver/badge/?version=latest)](https://readthedocs.org/projects/knot-resolver/?badge=latest)
 

daemon/tls_ephemeral_credentials.c

@@ -145,7 +145,9 @@ static gnutls_x509_privkey_t get_ephemeral_privkey ()
 				ssize_t bytes_written;
 				bytes_written = write(datafd, data.data, data.size);
 				if (bytes_written != data.size)
-					kr_log_error("[tls] failed to write %d octets to " EPHEMERAL_PRIVKEY_FILENAME " (%ld written)\n",
+					kr_log_error("[tls] failed to write %d octets to "
+						     EPHEMERAL_PRIVKEY_FILENAME
+						     " (%zd written)\n",
 						     data.size, bytes_written);
 			}
 		}

modules/ta_sentinel/ta_sentinel.lua

@@ -31,6 +31,7 @@ function M.layer.finish(state, req, pkt)
 		sentype = false
 		keytag = qname:match('^root%-key%-sentinel%-not%-ta%-(%x+)%.')
 	end
+	if not keytag then return state end
 
 	if kreq.rank ~= ffi.C.KR_RANK_SECURE or kreq.answer:cd() then
 		if verbose() then