2026-09-29 18:55:38 +02:00
|
|
|
# verify (ai-service-plane Req 5.3, 2.1-2.3, 7.2): one batched hunt per file with the known callers from
|
|
|
|
|
# repo-facts in the prompt. Bound to its Model by the `openultrasast.io/model` annotation, which the reconciler
|
|
|
|
|
# strips and renders as OUSAST_MODEL / OUSAST_MODEL_PARAMS. This is the template the per-case, per-pass Tasks of a
|
|
|
|
|
# Run are generated from (the pass is OUSAST_PASS=a|b in their env). The image is digest-pinned.
|
|
|
|
|
apiVersion: ax.io/v1alpha1
|
|
|
|
|
kind: Task
|
|
|
|
|
metadata:
|
|
|
|
|
name: verify
|
|
|
|
|
atespace: default
|
|
|
|
|
annotations:
|
|
|
|
|
openultrasast.io/model: deepseek-flash
|
|
|
|
|
spec:
|
2026-09-29 21:23:25 +02:00
|
|
|
image: "localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76"
|
2026-09-29 18:55:38 +02:00
|
|
|
command: ["verify"]
|
|
|
|
|
resources:
|
|
|
|
|
requests:
|
|
|
|
|
cpu: "250m"
|
|
|
|
|
memory: "384Mi"
|
|
|
|
|
limits:
|
|
|
|
|
cpu: "1"
|
|
|
|
|
memory: "1Gi"
|
