🛡️ Sentinel: Fix G112 ReadHeaderTimeout in CLI example

[matdev83]

🚨 Severity: MEDIUM
💡 Vulnerability: Potential Slowloris Attack because ReadHeaderTimeout is not configured in the http.Server.
🎯 Impact: A slow or malicious client could hold connections open indefinitely, exhausting resources.
🔧 Fix: Explicitly set ReadHeaderTimeout to 3 * time.Second in the http.Server definition.
✅ Verification: Verified by checking gosec output and that the file now contains ReadHeaderTimeout.

---

PR created automatically by Jules for task 1832642617983721260 started by @matdev83

[google-labs-jules]

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!

New to Jules? Learn more at jules.google/docs.

---

For security, I will only act on instructions from the user who triggered this task.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 662d7de7-7061-484d-9b15-0407e69e89b2

📥 Commits

Reviewing files that changed from the base of the PR and between 5a09d8b and 1cfc8c8.

📒 Files selected for processing (1)

• .kiro/skills/golang-cli/assets/examples/signal.go

📜 Recent review details

⏰ Context from checks skipped due to timeout. (1)

• GitHub Check: qa

🔇 Additional comments (1)

.kiro/skills/golang-cli/assets/examples/signal.go (1)

24-24: LGTM!

---

📝 Walkthrough

Summary by CodeRabbit

• Bug Fixes
  • Added a 3-second limit for receiving HTTP request headers in the example server, improving handling of slow or incomplete requests.

Walkthrough

Changes

HTTP server timeout

Layer / File(s)	Summary
Configure request-header timeout .kiro/skills/golang-cli/assets/examples/signal.go	The example HTTP server sets ReadHeaderTimeout to three seconds during initialization.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 8

✅ Passed checks (8 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the ReadHeaderTimeout G112 fix in the CLI example.
Description check	✅ Passed	The description directly explains the timeout fix and its Slowloris mitigation.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
No Secrets	✅ Passed	Changed file only sets http.Server ReadHeaderTimeout; no credentials, tokens, keys, passwords, or sensitive URLs are present.
Context Propagation	✅ Passed	PASS — the PR only adds ReadHeaderTimeout; the example still uses signal.NotifyContext, defers stop(), and shuts down from ctx.Done with a bounded timeout.
No Accidental Public Api Break	✅ Passed	Only an unexported CLI example changed; the patch adds ReadHeaderTimeout to http.Server and doesn’t alter pkg/**, exported APIs, flags, or config.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}