fix(security): SSRF via AgentCard URL and context ID Injection (A2A-SSRF-01, A2A-INJ-01) #3156
Annotations
15 errors, 1 warning, and 3 notices
|
Lint Code Base
Process completed with exit code 1.
|
|
Lint Code Base
1 error
|
|
Lint Code Base:
src/a2a/server/request_handlers/default_request_handler.py#L491
Multiple exception types must be parenthesized prior to Python 3.14
|
|
Lint Code Base
Process completed with exit code 2.
|
|
Lint Code Base
Process completed with exit code 1.
|
|
ruff (Q000):
src/a2a/client/card_resolver.py#L134
src/a2a/client/card_resolver.py:134:17: Q000 Double quotes found but single quotes preferred
help: Replace double quotes with single quotes
|
|
ruff (Q000):
src/a2a/client/card_resolver.py#L130
src/a2a/client/card_resolver.py:130:17: Q000 Double quotes found but single quotes preferred
help: Replace double quotes with single quotes
|
|
ruff (Q000):
src/a2a/client/card_resolver.py#L120
src/a2a/client/card_resolver.py:120:21: Q000 Double quotes found but single quotes preferred
help: Replace double quotes with single quotes
|
|
ruff (Q000):
src/a2a/client/card_resolver.py#L104
src/a2a/client/card_resolver.py:104:17: Q000 Double quotes found but single quotes preferred
help: Replace double quotes with single quotes
|
|
ruff (Q000):
src/a2a/client/card_resolver.py#L94
src/a2a/client/card_resolver.py:94:22: Q000 Double quotes found but single quotes preferred
help: Replace double quotes with single quotes
|
|
ruff (Q000):
src/a2a/client/card_resolver.py#L92
src/a2a/client/card_resolver.py:92:54: Q000 Double quotes found but single quotes preferred
help: Replace double quotes with single quotes
|
|
ruff (Q000):
src/a2a/client/card_resolver.py#L59
src/a2a/client/card_resolver.py:59:55: Q000 Double quotes found but single quotes preferred
help: Replace double quotes with single quotes
|
|
ruff (Q000):
src/a2a/client/card_resolver.py#L58
src/a2a/client/card_resolver.py:58:41: Q000 Double quotes found but single quotes preferred
help: Replace double quotes with single quotes
|
|
ruff (I001):
src/a2a/client/card_resolver.py#L14
src/a2a/client/card_resolver.py:14:1: I001 Import block is un-sorted or un-formatted
help: Organize imports
|
|
ruff (D415):
src/a2a/client/card_resolver.py#L1
src/a2a/client/card_resolver.py:1:1: D415 First line should end with a period, question mark, or exclamation point
help: Add closing punctuation
|
|
Lint Code Base
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: getunlatch/jscpd-github-action@v1.3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Lint Code Base
repository contains 25 duplications.
2 duplications were part of this PR and were annotated
|
|
Copy/pasted code:
src/a2a/server/request_handlers/default_request_handler.py#L190
see src/a2a/server/request_handlers/default_request_handler.py (582-594)
|
|
Copy/pasted code:
src/a2a/server/request_handlers/default_request_handler.py#L582
see src/a2a/server/request_handlers/default_request_handler.py (190-203)
|