fix: add HTTP timeout to reqwest client and CVE stage timeout #79

Merged

sharang merged 1 commits from fix/cve-scan-http-timeout into main

2026-05-13 07:30:27 +00:00

Author	SHA1	Message	Date
Sharang Parnerkar	4d5eedcc8b	fix: add HTTP timeout to reqwest client and CVE stage timeout CI / Check (pull_request) Successful in 9m39s Details CI / Detect Changes (pull_request) Has been skipped Details CI / Deploy Agent (pull_request) Has been skipped Details CI / Deploy Dashboard (pull_request) Has been skipped Details CI / Deploy Docs (pull_request) Has been skipped Details CI / Deploy MCP (pull_request) Has been skipped Details Without a timeout on the reqwest client, sequential NVD API calls for each CVE alert could hang indefinitely. With 1098 SBOM entries producing hundreds of alerts, this would stall the scan pipeline. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-13 08:48:03 +02:00