Skip to content

Feat: ConfigMap-driven workflow HTTP denylist and SSRF hardening - #235

Open
roguepikachu wants to merge 9 commits into
kubevela:mainfrom
roguepikachu:fix/ssrf-http-guard
Open

Feat: ConfigMap-driven workflow HTTP denylist and SSRF hardening#235
roguepikachu wants to merge 9 commits into
kubevela:mainfrom
roguepikachu:fix/ssrf-http-guard

Feat: add validated workflow HTTP deny config template.

b2ce418
Select commit
Loading
Failed to load commit list.
Codecov / codecov/project failed Jul 29, 2026 in 1s

24.70% (-37.80%) compared to d7db9c4

View this Pull Request on Codecov

24.70% (-37.80%) compared to d7db9c4

Details

Codecov Report

❌ Patch coverage is 27.01754% with 208 lines in your changes missing coverage. Please review.
✅ Project coverage is 24.70%. Comparing base (d7db9c4) to head (b2ce418).
⚠️ Report is 19 commits behind head on main.

Files with missing lines Patch % Lines
pkg/utils/httpguard/deny_config.go 0.00% 68 Missing ⚠️
pkg/utils/httpguard/deny_source.go 24.35% 56 Missing and 3 partials ⚠️
pkg/utils/httpguard/policy.go 38.94% 35 Missing and 23 partials ⚠️
pkg/providers/http/http.go 31.57% 9 Missing and 4 partials ⚠️
pkg/utils/httpguard/transport.go 60.00% 6 Missing and 4 partials ⚠️

❗ There is a different number of reports uploaded between BASE (d7db9c4) and HEAD (b2ce418). Click for more details.

HEAD has 1 upload less than BASE
Flag BASE (d7db9c4) HEAD (b2ce418)
unit-test 1 0
Additional details and impacted files 
@@             Coverage Diff             @@
##             main     #235       +/-   ##
===========================================
- Coverage   62.49%   24.70%   -37.80%     
===========================================
  Files          62       68        +6     
  Lines        4415     5510     +1095     
===========================================
- Hits         2759     1361     -1398     
- Misses       1324     3884     +2560     
+ Partials      332      265       -67

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
View more details on Codecov