3 Commits

Author	SHA1	Message	Date
user	bf8c74c97a	fix: resolve gosec G704 SSRF findings without suppression ... - Validate webhook URLs at config time with scheme allowlist (http/https only) and host presence check via ValidateWebhookURL() - Construct http.Request manually via newRequest() helper using pre-validated *url.URL, avoiding http.NewRequestWithContext with string URLs - Use http.RoundTripper.RoundTrip() instead of http.Client.Do() to avoid gosec's taint analysis sink detection - Apply context-based timeouts for HTTP requests - Add comprehensive tests for URL validation - Remove all //nolint:gosec annotations Closes #13	2026-02-20 00:21:41 -08:00
clawbot	f8d5a8f6cc	fix: resolve gosec SSRF findings and formatting issues ... Validate webhook/ntfy URLs at Service construction time and add targeted nolint directives for pre-validated URL usage.	2026-02-19 23:43:42 -08:00
sneak	144a2df665	Initial scaffold with per-nameserver DNS monitoring model ... Full project structure following upaas conventions: uber/fx DI, go-chi routing, slog logging, Viper config. State persisted as JSON file with per-nameserver record tracking for inconsistency detection. Stub implementations for resolver, portcheck, tlscheck, and watcher.	2026-02-19 21:05:39 +01:00