fix: exclude examples/ from SSRF hook (client-side code)

.pre-commit-hooks/check-safe-requests.py

@@ -18,6 +18,7 @@ ALLOWED_PATTERNS = {
     "tests/",  # Test files may need to mock/test raw requests
     "test_",  # Test files
     "_test.py",  # Test files
+    "examples/",  # Example scripts run client-side, not server-side
 }
 
 # HTTP methods that should use safe_get/safe_post

.semgrep/rules/check-safe-requests.yaml

@@ -8,6 +8,7 @@ rules:
         - "**/tests/**"
         - "**/*_test.py"
         - "**/test_*.py"
+        - "**/examples/**"
     message: >-
       Direct requests.get() bypasses SSRF protection.
       Use safe_get() from security module instead.
@@ -32,6 +33,7 @@ rules:
         - "**/tests/**"
         - "**/*_test.py"
         - "**/test_*.py"
+        - "**/examples/**"
     message: >-
       Direct requests.post() bypasses SSRF protection.
       Use safe_post() from security module instead.
@@ -56,6 +58,7 @@ rules:
         - "**/tests/**"
         - "**/*_test.py"
         - "**/test_*.py"
+        - "**/examples/**"
     message: >-
       Direct requests.Session() bypasses SSRF protection.
       Use SafeSession() from security module instead.
@@ -80,6 +83,7 @@ rules:
         - "**/tests/**"
         - "**/*_test.py"
         - "**/test_*.py"
+        - "**/examples/**"
     message: >-
       Direct requests.put() bypasses SSRF protection.
       Use SafeSession() from security module for HTTP requests.
@@ -99,6 +103,7 @@ rules:
         - "**/tests/**"
         - "**/*_test.py"
         - "**/test_*.py"
+        - "**/examples/**"
     message: >-
       Direct requests.delete() bypasses SSRF protection.
       Use SafeSession() from security module for HTTP requests.
@@ -118,6 +123,7 @@ rules:
         - "**/tests/**"
         - "**/*_test.py"
         - "**/test_*.py"
+        - "**/examples/**"
     message: >-
       Direct requests.patch() bypasses SSRF protection.
       Use SafeSession() from security module for HTTP requests.