Enhance sast-rule go/injection/rule-ssrf.yml
This rule has already been enhanced as part of Enhance SAST rule go/injection/rule-ssrf.yml (#435728 - closed).
However, it was found that it still generates too many false positives. In particular, it tends to find many vulnerabilities in test code, for which this rule is irrelevant. Therefore, test code should be excluded.
On top of that, further improvements must be considered as any dynamically constructed URL will currently going to be flagged.
Edited by Dinesh Bolkensteyn