feat: add --url flag for deploy preview pentesting

src/bin/index.ts

@@ -20,6 +20,7 @@ program
   .option("-l, --level <level>", "Pentest level: priority or full", "full")
   .option("--quick", "Run a quick pentest (highest-risk endpoints only, ~15 mins). Shorthand for --level priority")
   .option("--no-wait", "Don't wait for pentest to complete")
+  .option("-u, --url <url>", "Deploy preview URL to pentest against")
   .option("-e, --environment <env>", "Environment: dev, staging, or production")
   .option(
     "-c, --commit <sha>",
@@ -45,6 +46,15 @@ program
         process.exit(1);
       }
 
+      if (options.url) {
+        try {
+          new URL(options.url);
+        } catch {
+          console.error(`Invalid URL: "${options.url}"`);
+          process.exit(1);
+        }
+      }
+
       const scanLevel: "priority" | "full" = options.quick
         ? "priority"
         : (options.level as "priority" | "full");
@@ -58,6 +68,7 @@ program
         environment: options.environment as Environment | undefined,
         errorSeverityThreshold: severityThreshold,
         commitSha: options.commit,
+        targetUrl: options.url,
       });
 
       if (result.status === "completed") {

src/lib/ci.ts

@@ -140,6 +140,7 @@ export interface DispatchScanParams {
   scanLevel?: "priority" | "full";
   environment?: Environment;
   commitSha?: string;
+  targetUrl?: string;
 }
 
 export async function dispatchScan(
@@ -166,6 +167,7 @@ export async function dispatchScan(
       branch: params.branch,
       scanLevel: params.scanLevel,
       commitSha: params.commitSha,
+      ...(params.targetUrl && { targetUrl: params.targetUrl }),
     }),
   });
 
@@ -296,6 +298,7 @@ export interface RunScanParams {
   pollIntervalMs?: number;
   errorSeverityThreshold?: SeverityLevel;
   commitSha?: string;
+  targetUrl?: string;
 }
 
 export async function runScan(params: RunScanParams = {}): Promise<ScanStatus> {
@@ -323,6 +326,7 @@ export async function runScan(params: RunScanParams = {}): Promise<ScanStatus> {
     scanLevel: params.scanLevel,
     environment,
     commitSha,
+    targetUrl: params.targetUrl,
   });
 
   console.log(`Pentest ${label} dispatched (ID: ${scanId})`);