added attacker ip

[afek854]

PR Type

Enhancement

---

Description

• Added a new AttackerIp field to the HttpRuleAlert struct.

• Enhanced the HttpRuleAlert struct to include attacker IP information.

---

Changes walkthrough 📝

	Relevant files
Enhancement	runtimeincidents.go Introduced `AttackerIp` field in `HttpRuleAlert` struct    armotypes/runtimeincidents.go Added a new AttackerIp field to the HttpRuleAlert struct. The new field is optional and supports JSON and BSON serialization. +2/-0

---

Need help?

Type /help how to ... in the comments thread for any question about Qodo Merge usage.

Check out the documentation for more information.

[codiumai-pr-agent-free]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 1 🔵⚪⚪⚪⚪

🧪 No relevant tests

🔒 Security concerns Sensitive information exposure: The AttackerIp field could potentially expose sensitive network information about attackers/users. While storing attacker IPs is a common security practice, care should be taken to ensure this data is properly protected, anonymized if needed, and compliant with relevant privacy regulations (e.g., GDPR). Consider adding documentation about data retention policies and access controls for this field.

⚡ No major issues detected

[codiumai-pr-agent-free]

PR Code Suggestions ✨

Explore these optional code suggestions:

Category	Suggestion	Score
Possible issue	Enforce valid IP address format Validate the IP address format before storing it in AttackerIp to ensure it's a valid IPv4 or IPv6 address. armotypes/runtimeincidents.go [140] -AttackerIp string `json:"attackerIp,omitempty" bson:"attackerIp,omitempty"` +AttackerIp net.IP `json:"attackerIp,omitempty" bson:"attackerIp,omitempty"` Apply this suggestion Suggestion importance[1-10]: 8 Why: Using net.IP type instead of string provides built-in validation and proper handling of IP addresses, preventing invalid IP values from being stored and ensuring type safety. This is particularly important for security-related fields.	8

[amitschendel]

SourceIp