Pulse/pkg/audit
rcourtman bb47e1831c security: SSRF protection for webhook URLs
- Add DNS resolution validation to block webhooks to internal IPs
- Validate hostname resolves before accepting webhook URL
- Block metadata endpoints (AWS, GCP, Azure)
- Block localhost, private IPs, and reserved ranges
- Add context timeout for DNS lookups (2s)
2026-01-22 00:42:23 +00:00
..
audit.go feat(enterprise): add Advanced Reporting and Audit Webhooks integration 2026-01-09 21:31:49 +00:00
audit_test.go feat(audit): Add audit log API endpoints and UI with signature verification 2026-01-08 19:19:57 +00:00
export.go refactor: Add testability improvements to core packages 2026-01-19 19:25:38 +00:00
export_test.go test: Add comprehensive test coverage across packages 2026-01-19 19:26:18 +00:00
signer.go feat(audit): add comprehensive audit logging system 2026-01-12 15:20:33 +00:00
signer_test.go feat(audit): add comprehensive audit logging system 2026-01-12 15:20:33 +00:00
sqlite_logger.go fix: use pure Go SQLite driver for arm64 compatibility 2026-01-21 18:58:23 +00:00
sqlite_logger_test.go feat(audit): add comprehensive audit logging system 2026-01-12 15:20:33 +00:00
webhook.go security: SSRF protection for webhook URLs 2026-01-22 00:42:23 +00:00