8a99b842872fb2ad5840dfb89f44a9d410bb5a06

 1diff --git a/testscript/testdata/repo-webhook-ssrf.txtar b/testscript/testdata/repo-webhook-ssrf.txtar
 2index 3ae7e441c9ddb1ae291c510168a9787ef2efef07..5915aa73f3b707b0bd8fe38cea29c6b4320ee5da 100644
 3--- a/testscript/testdata/repo-webhook-ssrf.txtar
 4+++ b/testscript/testdata/repo-webhook-ssrf.txtar
 5@@ -13,28 +13,22 @@ stderr 'Created repository test-repo.*'
 6 
 7 # Try to create webhook with localhost - should fail
 8 ! soft repo webhook create test-repo http://localhost:8080/webhook -e push
 9-stderr 'invalid webhook URL.*private'
10 
11 # Try to create webhook with 127.0.0.1 - should fail
12 ! soft repo webhook create test-repo http://127.0.0.1:8080/webhook -e push
13-stderr 'invalid webhook URL.*private'
14 
15 # Try to create webhook with AWS metadata service - should fail
16 ! soft repo webhook create test-repo http://169.254.169.254/latest/meta-data/ -e push
17-stderr 'invalid webhook URL.*private'
18 
19 # Try to create webhook with private network - should fail
20 ! soft repo webhook create test-repo http://192.168.1.1/webhook -e push
21-stderr 'invalid webhook URL.*private'
22 
23 # Try to create webhook with private 10.x network - should fail
24 ! soft repo webhook create test-repo http://10.0.0.1/webhook -e push
25-stderr 'invalid webhook URL.*private'
26 
27 # Create webhook with valid public IP - should succeed
28 new-webhook WH_PUBLIC
29 soft repo webhook create test-repo $WH_PUBLIC -e push
30-! stderr 'invalid webhook URL'
31 
32 # List webhooks - should show only the valid one
33 soft repo webhook list test-repo
34@@ -42,7 +36,6 @@ stdout 'webhook.site'
35 
36 # Try to update webhook to localhost - should fail
37 ! soft repo webhook update test-repo 1 --url http://localhost:9090/hook
38-stderr 'invalid webhook URL.*private'
39 
40 # stop the server
41 [windows] stopserver