code: func NewSSRFCheck(id string, conf gosec.Config) (gosec.Rule, []ast.Node) {
  	rule := &ssrf{
  		CallList: gosec.NewCallList(),
  		MetaData: gosec.MetaData{
  			ID:         id,
  			What:       "Potential HTTP request made with variable url",
  			Severity:   gosec.Medium,
  			Confidence: gosec.Medium,
  		},
  	}
  	rule.AddAll("net/http", "Do", "Get", "Head", "Post", "PostForm", "RoundTrip")
  	return rule, []ast.Node{(*ast.CallExpr)(nil)}
  }
docs: // NewSSRFCheck detects cases where HTTP requests are sent