323b2aa637
- Apply URL validation using security.ValidateWebhookURL() to all webhook HTTP request paths in notification_service.go - Block private IPs (RFC 1918), cloud metadata endpoints, and loopback - Add comprehensive SSRF test coverage - Add CodeQL VS Code tasks for local security scanning - Update Definition of Done to include CodeQL scans - Clean up stale SARIF files from repo root Resolves CI security gate failure for CWE-918.
15 lines
271 B
Plaintext
15 lines
271 B
Plaintext
{
|
|
"folders": [
|
|
{
|
|
"path": "."
|
|
},
|
|
{
|
|
"path": "../codeql"
|
|
}
|
|
],
|
|
"settings": {
|
|
"codeQL.createQuery.qlPackLocation": "/projects/Charon",
|
|
"sarif-viewer.connectToGithubCodeScanning": "on"
|
|
}
|
|
}
|