feat(infrastructure): defense-in-depth SSRF protection for outbound HTTP#24

Merged

alexgarzao merged 8 commits into

feature/ssrf-protection-executor-config

May 21, 2026

Commits on May 14, 2026

feat(security): defense-in-depth SSRF protection across outbound HTTP paths
alexgarzao
committed

Commits on May 15, 2026

fix(security): enforce SSRF at dial time so HTTPS to hostnames works
alexgarzao
committed
fix(security): add gosec native #nosec G704 suppression alongside nolint
alexgarzao
committed
Merge remote-tracking branch 'origin/develop' into feature/ssrf-protection-executor-config
alexgarzao
committed
fix(security): split gosec nosec from nolint to satisfy native parser
alexgarzao
committed
fix(infrastructure): address 8 correctness findings from PR review
alexgarzao
committed
docs(infrastructure): align SSRF docs with dial-time design + DX cleanup
alexgarzao
committed

Commits on May 21, 2026

Merge branch 'develop' into feature/ssrf-protection-executor-config
alexgarzao
committed