feat(osv-advisory-source,validate-url): add SSRF defense for --osv-url flag#751

Open

luojiyin1987 wants to merge 9 commits into

luojiyin1987:feat/ssrf-defense-osv-url

Commits on Jun 26, 2026

feat(osv-advisory-source,validate-url): add SSRF defense for --osv-url flag
luojiyin1987
committed
docs: add --allow-private-osv-url flag documentation
luojiyin1987
committed
docs(corporate-proxy): remove non-existent config set osv-url command
luojiyin1987
committed
fix(validate-url): check all DNS results and expand private IP coverage
luojiyin1987
committed
fix(ssrf-defense): address PR #751 review feedback from sonukapoor
luojiyin1987
committed
fix(ssrf-defense): SSRF warning no longer short-circuits option validation
luojiyin1987
committed
docs(security-assurance-case): fix A10 SSRF description to match implementation
luojiyin1987
committed
refactor(validate-url): replace IPv4 regex with CIDR numerical matching
luojiyin1987
committed
docs(validate-url): fix IPv6 comment to avoid implying IPv6 has no CIDR
luojiyin1987
committed