feat(plane): increment manifests for the 46-candidate validation run (task 7)

Model deepseek-flash (declared provider extension, endpoint prices in parameters, secretKey naming the DEEPSEEK_API_KEY secret), digest-pinned Task templates repo-facts / verify / agree, and a generator (plane/generate.py, `ousast plane workspaces --validation-set ...`) that emits per case the vulnerable-pin Workspace, a files-only inputs Workspace (recorded candidates after the recorded triage, declared sites, triage), per-case Tasks and one Run validation-46: facts -> verify a, verify b -> agree for the 15 cases, 46 candidates (43 kept), budgets 1.5x the recorded per-pass share. A Run entry cannot add a binding or env, and Run.inputs names only task artifacts, so the case is fixed by per-case Tasks. Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo
2026-10-16 11:49:28 +00:00 · 2026-09-29 18:55:38 +02:00
parent 1a69e50a68
commit a35397c0ec
41 changed files with 3285 additions and 2 deletions
@@ -0,0 +1,16 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: budibase-mongo-template-nosqli-inputs
+  atespace: default
+spec:
+  files:
+  - path: candidates.json
+    content: "{\n \"candidates\": [\n  [\n   \"packages/server/src/integrations/mongodb.ts\",\n   \"read\",\n   539\n  ],\n  [\n   \"packages/server/src/sdk/workspace/queries/queries.ts\",\n   \"enrichContext\",\n   136\n  ]\n ],\n \"family\": \"injection\",\n \"id\": \"budibase-mongo-template-nosqli\"\n}\n"
+  - path: functions.json
+    content: "[\n {\n  \"function\": \"read\",\n  \"line\": 539,\n  \"path\": \"packages/server/src/integrations/mongodb.ts\"\n },\n {\n  \"function\": \"enrichContext\",\n  \"line\": 136,\n  \"path\": \"packages/server/src/sdk/workspace/queries/queries.ts\"\n }\n]\n"
+  - path: case.json
+    content: "{\n \"family\": \"injection\",\n \"id\": \"budibase-mongo-template-nosqli\",\n \"sites\": [\n  \"packages/server/src/sdk/workspace/queries/queries.ts::enrichContext\",\n  \"packages/server/src/integrations/mongodb.ts::read\"\n ]\n}\n"
+  - path: triage.json
+    content: "{\n \"candidates\": [\n  [\n   \"packages/server/src/integrations/mongodb.ts\",\n   \"read\",\n   539\n  ],\n  [\n   \"packages/server/src/sdk/workspace/queries/queries.ts\",\n   \"enrichContext\",\n   136\n  ]\n ],\n \"kept\": [\n  [\n   \"packages/server/src/integrations/mongodb.ts\",\n   \"read\",\n   539\n  ],\n  [\n   \"packages/server/src/sdk/workspace/queries/queries.ts\",\n   \"enrichContext\",\n   136\n  ]\n ],\n \"triage\": {\n  \"packages/server/src/integrations/mongodb.ts::read\": \"request\",\n  \"packages/server/src/sdk/workspace/queries/queries.ts::enrichContext\": \"parameter\"\n }\n}\n"
@@ -0,0 +1,14 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: budibase-mongo-template-nosqli-vulnerable
+  atespace: default
+  annotations:
+    openultrasast.io/git-commits: repo=b7e63df737eede85d951aa9665b0c0778ece7ccb
+spec:
+  git:
+  - name: repo
+    repo: https://github.com/Budibase/budibase
+    dir: repo
+    depth: 1
@@ -0,0 +1,16 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: cct-studio-server-cmdi-inputs
+  atespace: default
+spec:
+  files:
+  - path: candidates.json
+    content: "{\n \"candidates\": [\n  [\n   \"cli-tool/src/sandbox-server.js\",\n   \"checkAndInstallAgent\",\n   280\n  ],\n  [\n   \"cli-tool/src/sandbox-server.js\",\n   \"executeLocalTask\",\n   464\n  ]\n ],\n \"family\": \"injection\",\n \"id\": \"cct-studio-server-cmdi\"\n}\n"
+  - path: functions.json
+    content: "[\n {\n  \"function\": \"checkAndInstallAgent\",\n  \"line\": 280,\n  \"path\": \"cli-tool/src/sandbox-server.js\"\n },\n {\n  \"function\": \"executeLocalTask\",\n  \"line\": 464,\n  \"path\": \"cli-tool/src/sandbox-server.js\"\n }\n]\n"
+  - path: case.json
+    content: "{\n \"family\": \"injection\",\n \"id\": \"cct-studio-server-cmdi\",\n \"sites\": [\n  \"cli-tool/src/sandbox-server.js::executeLocalTask\",\n  \"cli-tool/src/sandbox-server.js::checkAndInstallAgent\"\n ]\n}\n"
+  - path: triage.json
+    content: "{\n \"candidates\": [\n  [\n   \"cli-tool/src/sandbox-server.js\",\n   \"checkAndInstallAgent\",\n   280\n  ],\n  [\n   \"cli-tool/src/sandbox-server.js\",\n   \"executeLocalTask\",\n   464\n  ]\n ],\n \"kept\": [\n  [\n   \"cli-tool/src/sandbox-server.js\",\n   \"checkAndInstallAgent\",\n   280\n  ],\n  [\n   \"cli-tool/src/sandbox-server.js\",\n   \"executeLocalTask\",\n   464\n  ]\n ],\n \"triage\": {\n  \"cli-tool/src/sandbox-server.js::checkAndInstallAgent\": \"parameter\",\n  \"cli-tool/src/sandbox-server.js::executeLocalTask\": \"request\"\n }\n}\n"
@@ -0,0 +1,14 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: cct-studio-server-cmdi-vulnerable
+  atespace: default
+  annotations:
+    openultrasast.io/git-commits: repo=acdb5893412a81eaec9862ee24a4613bf296ab45
+spec:
+  git:
+  - name: repo
+    repo: https://github.com/davila7/claude-code-templates
+    dir: repo
+    depth: 1
@@ -0,0 +1,16 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: contextforge-prompt-ssti-inputs
+  atespace: default
+spec:
+  files:
+  - path: candidates.json
+    content: "{\n \"candidates\": [\n  [\n   \"mcpgateway/services/prompt_service.py\",\n   \"_compile_jinja_template\",\n   106\n  ],\n  [\n   \"mcpgateway/services/prompt_service.py\",\n   \"_render_template\",\n   2892\n  ]\n ],\n \"family\": \"injection\",\n \"id\": \"contextforge-prompt-ssti\"\n}\n"
+  - path: functions.json
+    content: "[\n {\n  \"function\": \"_compile_jinja_template\",\n  \"line\": 106,\n  \"path\": \"mcpgateway/services/prompt_service.py\"\n },\n {\n  \"function\": \"_render_template\",\n  \"line\": 2892,\n  \"path\": \"mcpgateway/services/prompt_service.py\"\n }\n]\n"
+  - path: case.json
+    content: "{\n \"family\": \"injection\",\n \"id\": \"contextforge-prompt-ssti\",\n \"sites\": [\n  \"mcpgateway/services/prompt_service.py::_render_template\",\n  \"mcpgateway/services/prompt_service.py::_compile_jinja_template\"\n ]\n}\n"
+  - path: triage.json
+    content: "{\n \"candidates\": [\n  [\n   \"mcpgateway/services/prompt_service.py\",\n   \"_compile_jinja_template\",\n   106\n  ],\n  [\n   \"mcpgateway/services/prompt_service.py\",\n   \"_render_template\",\n   2892\n  ]\n ],\n \"kept\": [\n  [\n   \"mcpgateway/services/prompt_service.py\",\n   \"_compile_jinja_template\",\n   106\n  ],\n  [\n   \"mcpgateway/services/prompt_service.py\",\n   \"_render_template\",\n   2892\n  ]\n ],\n \"triage\": {\n  \"mcpgateway/services/prompt_service.py::_compile_jinja_template\": \"stored\",\n  \"mcpgateway/services/prompt_service.py::_render_template\": \"stored\"\n }\n}\n"
@@ -0,0 +1,14 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: contextforge-prompt-ssti-vulnerable
+  atespace: default
+  annotations:
+    openultrasast.io/git-commits: repo=0f8e0ad679f1fff685f486e17f642ac863c8ca9e
+spec:
+  git:
+  - name: repo
+    repo: https://github.com/IBM/mcp-context-forge
+    dir: repo
+    depth: 1
@@ -0,0 +1,16 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: froxlor-admin-ip-second-order-sqli-inputs
+  atespace: default
+spec:
+  files:
+  - path: candidates.json
+    content: "{\n \"candidates\": [\n  [\n   \"lib/Froxlor/Api/Commands/Domains.php\",\n   \"validateIpAddresses\",\n   1050\n  ],\n  [\n   \"lib/Froxlor/Api/Commands/IpsAndPorts.php\",\n   \"listing\",\n   76\n  ],\n  [\n   \"lib/Froxlor/Api/Commands/IpsAndPorts.php\",\n   \"listingCount\",\n   108\n  ]\n ],\n \"family\": \"injection\",\n \"id\": \"froxlor-admin-ip-second-order-sqli\"\n}\n"
+  - path: functions.json
+    content: "[\n {\n  \"function\": \"validateIpAddresses\",\n  \"line\": 1050,\n  \"path\": \"lib/Froxlor/Api/Commands/Domains.php\"\n },\n {\n  \"function\": \"listing\",\n  \"line\": 76,\n  \"path\": \"lib/Froxlor/Api/Commands/IpsAndPorts.php\"\n },\n {\n  \"function\": \"listingCount\",\n  \"line\": 108,\n  \"path\": \"lib/Froxlor/Api/Commands/IpsAndPorts.php\"\n }\n]\n"
+  - path: case.json
+    content: "{\n \"family\": \"injection\",\n \"id\": \"froxlor-admin-ip-second-order-sqli\",\n \"sites\": [\n  \"lib/Froxlor/Api/Commands/IpsAndPorts.php::listing\",\n  \"lib/Froxlor/Api/Commands/IpsAndPorts.php::listingCount\",\n  \"lib/Froxlor/Api/Commands/Domains.php::validateIpAddresses\"\n ]\n}\n"
+  - path: triage.json
+    content: "{\n \"candidates\": [\n  [\n   \"lib/Froxlor/Api/Commands/Domains.php\",\n   \"validateIpAddresses\",\n   1050\n  ],\n  [\n   \"lib/Froxlor/Api/Commands/IpsAndPorts.php\",\n   \"listing\",\n   76\n  ],\n  [\n   \"lib/Froxlor/Api/Commands/IpsAndPorts.php\",\n   \"listingCount\",\n   108\n  ]\n ],\n \"kept\": [\n  [\n   \"lib/Froxlor/Api/Commands/Domains.php\",\n   \"validateIpAddresses\",\n   1050\n  ],\n  [\n   \"lib/Froxlor/Api/Commands/IpsAndPorts.php\",\n   \"listing\",\n   76\n  ],\n  [\n   \"lib/Froxlor/Api/Commands/IpsAndPorts.php\",\n   \"listingCount\",\n   108\n  ]\n ],\n \"triage\": {\n  \"lib/Froxlor/Api/Commands/Domains.php::validateIpAddresses\": \"parameter\",\n  \"lib/Froxlor/Api/Commands/IpsAndPorts.php::listing\": \"request\",\n  \"lib/Froxlor/Api/Commands/IpsAndPorts.php::listingCount\": \"request\"\n }\n}\n"
@@ -0,0 +1,14 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: froxlor-admin-ip-second-order-sqli-vulnerable
+  atespace: default
+  annotations:
+    openultrasast.io/git-commits: repo=9bf03de643a2edee4642bfc6c94db1f05253da02
+spec:
+  git:
+  - name: repo
+    repo: https://github.com/froxlor/froxlor
+    dir: repo
+    depth: 1
@@ -0,0 +1,16 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: fuxa-tdengine-escape-sqli-inputs
+  atespace: default
+spec:
+  files:
+  - path: candidates.json
+    content: "{\n \"candidates\": [\n  [\n   \"server/runtime/storage/tdengine/index.js\",\n   \"getDaqValue\",\n   89\n  ]\n ],\n \"family\": \"injection\",\n \"id\": \"fuxa-tdengine-escape-sqli\"\n}\n"
+  - path: functions.json
+    content: "[\n {\n  \"function\": \"getDaqValue\",\n  \"line\": 89,\n  \"path\": \"server/runtime/storage/tdengine/index.js\"\n }\n]\n"
+  - path: case.json
+    content: "{\n \"family\": \"injection\",\n \"id\": \"fuxa-tdengine-escape-sqli\",\n \"sites\": [\n  \"server/runtime/storage/tdengine/index.js::getDaqValue\"\n ]\n}\n"
+  - path: triage.json
+    content: "{\n \"candidates\": [\n  [\n   \"server/runtime/storage/tdengine/index.js\",\n   \"getDaqValue\",\n   89\n  ]\n ],\n \"kept\": [\n  [\n   \"server/runtime/storage/tdengine/index.js\",\n   \"getDaqValue\",\n   89\n  ]\n ],\n \"triage\": {\n  \"server/runtime/storage/tdengine/index.js::getDaqValue\": \"parameter\"\n }\n}\n"
@@ -0,0 +1,14 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: fuxa-tdengine-escape-sqli-vulnerable
+  atespace: default
+  annotations:
+    openultrasast.io/git-commits: repo=193a888f8e3f805325072829b1644a2c768c948b
+spec:
+  git:
+  - name: repo
+    repo: https://github.com/frangoteam/FUXA
+    dir: repo
+    depth: 1
@@ -0,0 +1,16 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: lmdeploy-media-url-ssrf-inputs
+  atespace: default
+spec:
+  files:
+  - path: candidates.json
+    content: "{\n \"candidates\": [\n  [\n   \"lmdeploy/vl/media/connection.py\",\n   \"_load_http_url\",\n   68\n  ]\n ],\n \"family\": \"untrusted_destination\",\n \"id\": \"lmdeploy-media-url-ssrf\"\n}\n"
+  - path: functions.json
+    content: "[\n {\n  \"function\": \"_load_http_url\",\n  \"line\": 68,\n  \"path\": \"lmdeploy/vl/media/connection.py\"\n }\n]\n"
+  - path: case.json
+    content: "{\n \"family\": \"untrusted_destination\",\n \"id\": \"lmdeploy-media-url-ssrf\",\n \"sites\": [\n  \"lmdeploy/vl/media/connection.py::_load_http_url\"\n ]\n}\n"
+  - path: triage.json
+    content: "{\n \"candidates\": [\n  [\n   \"lmdeploy/vl/media/connection.py\",\n   \"_load_http_url\",\n   68\n  ]\n ],\n \"kept\": [\n  [\n   \"lmdeploy/vl/media/connection.py\",\n   \"_load_http_url\",\n   68\n  ]\n ],\n \"triage\": {\n  \"lmdeploy/vl/media/connection.py::_load_http_url\": \"parameter\"\n }\n}\n"
@@ -0,0 +1,14 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: lmdeploy-media-url-ssrf-vulnerable
+  atespace: default
+  annotations:
+    openultrasast.io/git-commits: repo=71648d239c978452720a6d6692fe914efc8a7b94
+spec:
+  git:
+  - name: repo
+    repo: https://github.com/InternLM/lmdeploy
+    dir: repo
+    depth: 1
@@ -0,0 +1,16 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: medplum-external-auth-open-redirect-inputs
+  atespace: default
+spec:
+  files:
+  - path: candidates.json
+    content: "{\n \"candidates\": [\n  [\n   \"packages/server/src/auth/external.ts\",\n   \"externalCallbackHandler\",\n   166\n  ]\n ],\n \"family\": \"untrusted_destination\",\n \"id\": \"medplum-external-auth-open-redirect\"\n}\n"
+  - path: functions.json
+    content: "[\n {\n  \"function\": \"externalCallbackHandler\",\n  \"line\": 166,\n  \"path\": \"packages/server/src/auth/external.ts\"\n }\n]\n"
+  - path: case.json
+    content: "{\n \"family\": \"untrusted_destination\",\n \"id\": \"medplum-external-auth-open-redirect\",\n \"sites\": [\n  \"packages/server/src/auth/external.ts::externalCallbackHandler\"\n ]\n}\n"
+  - path: triage.json
+    content: "{\n \"candidates\": [\n  [\n   \"packages/server/src/auth/external.ts\",\n   \"externalCallbackHandler\",\n   166\n  ]\n ],\n \"kept\": [\n  [\n   \"packages/server/src/auth/external.ts\",\n   \"externalCallbackHandler\",\n   166\n  ]\n ],\n \"triage\": {\n  \"packages/server/src/auth/external.ts::externalCallbackHandler\": \"parameter\"\n }\n}\n"
@@ -0,0 +1,14 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: medplum-external-auth-open-redirect-vulnerable
+  atespace: default
+  annotations:
+    openultrasast.io/git-commits: repo=5d4a8654b02aa67c444f96ae1eb5663c09854006
+spec:
+  git:
+  - name: repo
+    repo: https://github.com/medplum/medplum
+    dir: repo
+    depth: 1
@@ -0,0 +1,31 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: pgadmin-maintenance-sqli-inputs
+  atespace: default
+spec:
+  files:
+  - path: candidates.json
+    content: "{\n \"candidates\": [\n  [\n   \"web/pgadmin/authenticate/ldap.py\",\n   \"login\",\n   169\n  ],\n  [\n   \"web/pgadmin/authenticate/ldap.py\",\n   \"search_ldap_user\",\n   288\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/__init__.py\",\n   \"create_restore_point\",\n   1881\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"_check_rename_db_or_change_table_space\",\n   808\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"_fetch_db_details\",\n   831\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"create\",\n   761\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"delete\",\n   1061\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"get_sql\",\n   1107\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"update\",\n   936\n\
+      \  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/casts/__init__.py\",\n   \"delete\",\n   546\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\",\n   \"_fetch_properties\",\n   362\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\",\n   \"create\",\n   412\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\",\n   \"enable_disable\",\n   662\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\",\n   \"get_job_args_value\",\n   779\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\",\n   \"run_job\",\n   746\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_schedules/__init__.py\",\n   \"create\",\n   365\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_schedules/__init__.py\"\
+      ,\n   \"msql\",\n   454\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_schedules/__init__.py\",\n   \"sql\",\n   492\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/event_triggers/__init__.py\",\n   \"msql\",\n   623\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/extensions/__init__.py\",\n   \"create\",\n   290\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/extensions/__init__.py\",\n   \"delete\",\n   394\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/extensions/utils.py\",\n   \"get_extension_details\",\n   30\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/foreign_data_wrappers/__init__.py\",\n   \"delete\",\n   601\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/foreign_data_wrappers/foreign_servers/__init__.py\",\n   \"create\",\n   464\n  ],\n  [\n   \"web/pgadmin/tools/maintenance/__init__.py\",\n   \"\
+      create_maintenance_job\",\n   222\n  ]\n ],\n \"family\": \"injection\",\n \"id\": \"pgadmin-maintenance-sqli\"\n}\n"
+  - path: functions.json
+    content: "[\n {\n  \"function\": \"login\",\n  \"line\": 169,\n  \"path\": \"web/pgadmin/authenticate/ldap.py\"\n },\n {\n  \"function\": \"search_ldap_user\",\n  \"line\": 288,\n  \"path\": \"web/pgadmin/authenticate/ldap.py\"\n },\n {\n  \"function\": \"create_restore_point\",\n  \"line\": 1881,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/__init__.py\"\n },\n {\n  \"function\": \"_check_rename_db_or_change_table_space\",\n  \"line\": 808,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\"\n },\n {\n  \"function\": \"_fetch_db_details\",\n  \"line\": 831,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\"\n },\n {\n  \"function\": \"create\",\n  \"line\": 761,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\"\n },\n {\n  \"function\": \"delete\",\n  \"line\": 1061,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\"\n },\n {\n  \"function\": \"get_sql\"\
+      ,\n  \"line\": 1107,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\"\n },\n {\n  \"function\": \"update\",\n  \"line\": 936,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\"\n },\n {\n  \"function\": \"delete\",\n  \"line\": 546,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/casts/__init__.py\"\n },\n {\n  \"function\": \"_fetch_properties\",\n  \"line\": 362,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\"\n },\n {\n  \"function\": \"create\",\n  \"line\": 412,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\"\n },\n {\n  \"function\": \"enable_disable\",\n  \"line\": 662,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\"\n },\n {\n  \"function\": \"get_job_args_value\",\n  \"line\": 779,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\"\
+      \n },\n {\n  \"function\": \"run_job\",\n  \"line\": 746,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\"\n },\n {\n  \"function\": \"create\",\n  \"line\": 365,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_schedules/__init__.py\"\n },\n {\n  \"function\": \"msql\",\n  \"line\": 454,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_schedules/__init__.py\"\n },\n {\n  \"function\": \"sql\",\n  \"line\": 492,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_schedules/__init__.py\"\n },\n {\n  \"function\": \"msql\",\n  \"line\": 623,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/event_triggers/__init__.py\"\n },\n {\n  \"function\": \"create\",\n  \"line\": 290,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/extensions/__init__.py\"\n },\n {\n  \"function\"\
+      : \"delete\",\n  \"line\": 394,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/extensions/__init__.py\"\n },\n {\n  \"function\": \"get_extension_details\",\n  \"line\": 30,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/extensions/utils.py\"\n },\n {\n  \"function\": \"delete\",\n  \"line\": 601,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/foreign_data_wrappers/__init__.py\"\n },\n {\n  \"function\": \"create\",\n  \"line\": 464,\n  \"path\": \"web/pgadmin/browser/server_groups/servers/databases/foreign_data_wrappers/foreign_servers/__init__.py\"\n },\n {\n  \"function\": \"create_maintenance_job\",\n  \"line\": 222,\n  \"path\": \"web/pgadmin/tools/maintenance/__init__.py\"\n }\n]\n"
+  - path: case.json
+    content: "{\n \"family\": \"injection\",\n \"id\": \"pgadmin-maintenance-sqli\",\n \"sites\": [\n  \"web/pgadmin/tools/maintenance/__init__.py::create_maintenance_job\"\n ]\n}\n"
+  - path: triage.json
+    content: "{\n \"candidates\": [\n  [\n   \"web/pgadmin/authenticate/ldap.py\",\n   \"login\",\n   169\n  ],\n  [\n   \"web/pgadmin/authenticate/ldap.py\",\n   \"search_ldap_user\",\n   288\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/__init__.py\",\n   \"create_restore_point\",\n   1881\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"_check_rename_db_or_change_table_space\",\n   808\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"_fetch_db_details\",\n   831\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"create\",\n   761\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"delete\",\n   1061\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"get_ctypes\",\n   651\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"get_encodings\",\n\
+      \   623\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"get_sql\",\n   1107\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"update\",\n   936\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/casts/__init__.py\",\n   \"delete\",\n   546\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\",\n   \"_fetch_properties\",\n   362\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\",\n   \"create\",\n   412\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\",\n   \"enable_disable\",\n   662\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\",\n   \"get_job_args_value\",\n   779\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\"\
+      ,\n   \"run_job\",\n   746\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_schedules/__init__.py\",\n   \"create\",\n   365\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_schedules/__init__.py\",\n   \"msql\",\n   454\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_schedules/__init__.py\",\n   \"sql\",\n   492\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/event_triggers/__init__.py\",\n   \"msql\",\n   623\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/extensions/__init__.py\",\n   \"create\",\n   290\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/extensions/__init__.py\",\n   \"delete\",\n   394\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/extensions/utils.py\",\n   \"get_extension_details\",\n   30\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/foreign_data_wrappers/__init__.py\"\
+      ,\n   \"delete\",\n   601\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/foreign_data_wrappers/foreign_servers/__init__.py\",\n   \"create\",\n   464\n  ],\n  [\n   \"web/pgadmin/tools/maintenance/__init__.py\",\n   \"create_maintenance_job\",\n   222\n  ]\n ],\n \"kept\": [\n  [\n   \"web/pgadmin/authenticate/ldap.py\",\n   \"login\",\n   169\n  ],\n  [\n   \"web/pgadmin/authenticate/ldap.py\",\n   \"search_ldap_user\",\n   288\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/__init__.py\",\n   \"create_restore_point\",\n   1881\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"_check_rename_db_or_change_table_space\",\n   808\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"_fetch_db_details\",\n   831\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"create\",\n   761\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\"\
+      ,\n   \"delete\",\n   1061\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"get_sql\",\n   1107\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/__init__.py\",\n   \"update\",\n   936\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/casts/__init__.py\",\n   \"delete\",\n   546\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\",\n   \"_fetch_properties\",\n   362\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\",\n   \"create\",\n   412\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\",\n   \"enable_disable\",\n   662\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\",\n   \"get_job_args_value\",\n   779\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py\"\
+      ,\n   \"run_job\",\n   746\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_schedules/__init__.py\",\n   \"create\",\n   365\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_schedules/__init__.py\",\n   \"msql\",\n   454\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_schedules/__init__.py\",\n   \"sql\",\n   492\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/event_triggers/__init__.py\",\n   \"msql\",\n   623\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/extensions/__init__.py\",\n   \"create\",\n   290\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/extensions/__init__.py\",\n   \"delete\",\n   394\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/extensions/utils.py\",\n   \"get_extension_details\",\n   30\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/foreign_data_wrappers/__init__.py\"\
+      ,\n   \"delete\",\n   601\n  ],\n  [\n   \"web/pgadmin/browser/server_groups/servers/databases/foreign_data_wrappers/foreign_servers/__init__.py\",\n   \"create\",\n   464\n  ],\n  [\n   \"web/pgadmin/tools/maintenance/__init__.py\",\n   \"create_maintenance_job\",\n   222\n  ]\n ],\n \"triage\": {\n  \"web/pgadmin/authenticate/ldap.py::login\": \"request\",\n  \"web/pgadmin/authenticate/ldap.py::search_ldap_user\": \"request\",\n  \"web/pgadmin/browser/server_groups/servers/__init__.py::create_restore_point\": \"request\",\n  \"web/pgadmin/browser/server_groups/servers/databases/__init__.py::_check_rename_db_or_change_table_space\": \"request\",\n  \"web/pgadmin/browser/server_groups/servers/databases/__init__.py::_fetch_db_details\": \"request\",\n  \"web/pgadmin/browser/server_groups/servers/databases/__init__.py::create\": \"request\",\n  \"web/pgadmin/browser/server_groups/servers/databases/__init__.py::delete\": \"request\",\n  \"web/pgadmin/browser/server_groups/servers/databases/__init__.py::get_ctypes\"\
+      : \"internal\",\n  \"web/pgadmin/browser/server_groups/servers/databases/__init__.py::get_encodings\": \"internal\",\n  \"web/pgadmin/browser/server_groups/servers/databases/__init__.py::get_sql\": \"request\",\n  \"web/pgadmin/browser/server_groups/servers/databases/__init__.py::update\": \"request\",\n  \"web/pgadmin/browser/server_groups/servers/databases/casts/__init__.py::delete\": \"request\",\n  \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py::_fetch_properties\": \"parameter\",\n  \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py::create\": \"request\",\n  \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py::enable_disable\": \"request\",\n  \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py::get_job_args_value\": \"stored\",\n  \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_jobs/__init__.py::run_job\"\
+      : \"request\",\n  \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_schedules/__init__.py::create\": \"request\",\n  \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_schedules/__init__.py::msql\": \"request\",\n  \"web/pgadmin/browser/server_groups/servers/databases/dbms_job_scheduler/dbms_schedules/__init__.py::sql\": \"stored\",\n  \"web/pgadmin/browser/server_groups/servers/databases/event_triggers/__init__.py::msql\": \"request\",\n  \"web/pgadmin/browser/server_groups/servers/databases/extensions/__init__.py::create\": \"request\",\n  \"web/pgadmin/browser/server_groups/servers/databases/extensions/__init__.py::delete\": \"request\",\n  \"web/pgadmin/browser/server_groups/servers/databases/extensions/utils.py::get_extension_details\": \"parameter\",\n  \"web/pgadmin/browser/server_groups/servers/databases/foreign_data_wrappers/__init__.py::delete\": \"request\",\n  \"web/pgadmin/browser/server_groups/servers/databases/foreign_data_wrappers/foreign_servers/__init__.py::create\"\
+      : \"request\",\n  \"web/pgadmin/tools/maintenance/__init__.py::create_maintenance_job\": \"request\"\n }\n}\n"
@@ -0,0 +1,14 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: pgadmin-maintenance-sqli-vulnerable
+  atespace: default
+  annotations:
+    openultrasast.io/git-commits: repo=d112dc3b962218efc3613fa727d54f0fc5b1d527
+spec:
+  git:
+  - name: repo
+    repo: https://github.com/pgadmin-org/pgadmin4
+    dir: repo
+    depth: 1
@@ -0,0 +1,16 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: qwed-sympy-eval-inputs
+  atespace: default
+spec:
+  files:
+  - path: candidates.json
+    content: "{\n \"candidates\": [\n  [\n   \"src/qwed_new/core/batch.py\",\n   \"_verify_item\",\n   239\n  ]\n ],\n \"family\": \"injection\",\n \"id\": \"qwed-sympy-eval\"\n}\n"
+  - path: functions.json
+    content: "[\n {\n  \"function\": \"_verify_item\",\n  \"line\": 239,\n  \"path\": \"src/qwed_new/core/batch.py\"\n }\n]\n"
+  - path: case.json
+    content: "{\n \"family\": \"injection\",\n \"id\": \"qwed-sympy-eval\",\n \"sites\": [\n  \"src/qwed_new/api/main.py::verify_math\",\n  \"src/qwed_new/core/batch.py::_verify_item\"\n ]\n}\n"
+  - path: triage.json
+    content: "{\n \"candidates\": [\n  [\n   \"src/qwed_new/core/batch.py\",\n   \"_verify_item\",\n   239\n  ]\n ],\n \"kept\": [\n  [\n   \"src/qwed_new/core/batch.py\",\n   \"_verify_item\",\n   239\n  ]\n ],\n \"triage\": {\n  \"src/qwed_new/core/batch.py::_verify_item\": \"parameter\"\n }\n}\n"
@@ -0,0 +1,14 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: qwed-sympy-eval-vulnerable
+  atespace: default
+  annotations:
+    openultrasast.io/git-commits: repo=06801f68cbf9c9b5e54cc17f2a61cb2792da7a26
+spec:
+  git:
+  - name: repo
+    repo: https://github.com/QWED-AI/qwed-verification
+    dir: repo
+    depth: 1
@@ -0,0 +1,16 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: reactpress-findall-column-sqli-inputs
+  atespace: default
+spec:
+  files:
+  - path: candidates.json
+    content: "{\n \"candidates\": [\n  [\n   \"server/src/modules/article/article.service.ts\",\n   \"findAll\",\n   108\n  ]\n ],\n \"family\": \"injection\",\n \"id\": \"reactpress-findall-column-sqli\"\n}\n"
+  - path: functions.json
+    content: "[\n {\n  \"function\": \"findAll\",\n  \"line\": 108,\n  \"path\": \"server/src/modules/article/article.service.ts\"\n }\n]\n"
+  - path: case.json
+    content: "{\n \"family\": \"injection\",\n \"id\": \"reactpress-findall-column-sqli\",\n \"sites\": [\n  \"server/src/modules/article/article.service.ts::findAll\"\n ]\n}\n"
+  - path: triage.json
+    content: "{\n \"candidates\": [\n  [\n   \"server/src/modules/article/article.service.ts\",\n   \"findAll\",\n   108\n  ]\n ],\n \"kept\": [\n  [\n   \"server/src/modules/article/article.service.ts\",\n   \"findAll\",\n   108\n  ]\n ],\n \"triage\": {\n  \"server/src/modules/article/article.service.ts::findAll\": \"parameter\"\n }\n}\n"
@@ -0,0 +1,14 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: reactpress-findall-column-sqli-vulnerable
+  atespace: default
+  annotations:
+    openultrasast.io/git-commits: repo=c3dd10681b3d2b5e224f7ac647b3769557603975
+spec:
+  git:
+  - name: repo
+    repo: https://github.com/fecommunity/reactpress
+    dir: repo
+    depth: 1
@@ -0,0 +1,16 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: unleash-addon-webhook-ssrf-inputs
+  atespace: default
+spec:
+  files:
+  - path: candidates.json
+    content: "{\n \"candidates\": [\n  [\n   \"src/lib/addons/addon.ts\",\n   \"fetchRetry\",\n   64\n  ]\n ],\n \"family\": \"untrusted_destination\",\n \"id\": \"unleash-addon-webhook-ssrf\"\n}\n"
+  - path: functions.json
+    content: "[\n {\n  \"function\": \"fetchRetry\",\n  \"line\": 64,\n  \"path\": \"src/lib/addons/addon.ts\"\n }\n]\n"
+  - path: case.json
+    content: "{\n \"family\": \"untrusted_destination\",\n \"id\": \"unleash-addon-webhook-ssrf\",\n \"sites\": [\n  \"src/lib/addons/addon.ts::fetchRetry\"\n ]\n}\n"
+  - path: triage.json
+    content: "{\n \"candidates\": [\n  [\n   \"src/lib/addons/addon.ts\",\n   \"fetchRetry\",\n   64\n  ]\n ],\n \"kept\": [\n  [\n   \"src/lib/addons/addon.ts\",\n   \"fetchRetry\",\n   64\n  ]\n ],\n \"triage\": {\n  \"src/lib/addons/addon.ts::fetchRetry\": \"parameter\"\n }\n}\n"
@@ -0,0 +1,14 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: unleash-addon-webhook-ssrf-vulnerable
+  atespace: default
+  annotations:
+    openultrasast.io/git-commits: repo=b9f3217d327f24094b4352130baa30387f85cffe
+spec:
+  git:
+  - name: repo
+    repo: https://github.com/Unleash/unleash
+    dir: repo
+    depth: 1
@@ -0,0 +1,18 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: winml-cli-serve-cors-inputs
+  atespace: default
+spec:
+  files:
+  - path: candidates.json
+    content: "{\n \"candidates\": [],\n \"family\": \"config_secrets\",\n \"id\": \"winml-cli-serve-cors\"\n}\n"
+  - path: functions.json
+    content: '[]
+
+      '
+  - path: case.json
+    content: "{\n \"family\": \"config_secrets\",\n \"id\": \"winml-cli-serve-cors\",\n \"sites\": [\n  \"src/winml/modelkit/serve/cli_api.py::<global>\",\n  \"src/winml/modelkit/serve/app.py::create_app\"\n ]\n}\n"
+  - path: triage.json
+    content: "{\n \"candidates\": [\n  [\n   \"src/winml/modelkit/serve/cli_api.py\",\n   \"<global>\",\n   148\n  ]\n ],\n \"kept\": [],\n \"triage\": {\n  \"src/winml/modelkit/serve/cli_api.py::<global>\": \"constant\"\n }\n}\n"
@@ -0,0 +1,14 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: winml-cli-serve-cors-vulnerable
+  atespace: default
+  annotations:
+    openultrasast.io/git-commits: repo=02179d185f0e3ac23518236b5ca1f61fd37ef680
+spec:
+  git:
+  - name: repo
+    repo: https://github.com/microsoft/winml-cli
+    dir: repo
+    depth: 1
@@ -0,0 +1,16 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: wp-directorist-avatar-ssrf-inputs
+  atespace: default
+spec:
+  files:
+  - path: candidates.json
+    content: "{\n \"candidates\": [\n  [\n   \"includes/rest-api/functions.php\",\n   \"directorist_rest_upload_image_from_url\",\n   115\n  ]\n ],\n \"family\": \"untrusted_destination\",\n \"id\": \"wp-directorist-avatar-ssrf\"\n}\n"
+  - path: functions.json
+    content: "[\n {\n  \"function\": \"directorist_rest_upload_image_from_url\",\n  \"line\": 115,\n  \"path\": \"includes/rest-api/functions.php\"\n }\n]\n"
+  - path: case.json
+    content: "{\n \"family\": \"untrusted_destination\",\n \"id\": \"wp-directorist-avatar-ssrf\",\n \"sites\": [\n  \"includes/rest-api/functions.php::directorist_rest_upload_image_from_url\"\n ]\n}\n"
+  - path: triage.json
+    content: "{\n \"candidates\": [\n  [\n   \"includes/rest-api/functions.php\",\n   \"directorist_rest_upload_image_from_url\",\n   115\n  ]\n ],\n \"kept\": [\n  [\n   \"includes/rest-api/functions.php\",\n   \"directorist_rest_upload_image_from_url\",\n   115\n  ]\n ],\n \"triage\": {\n  \"includes/rest-api/functions.php::directorist_rest_upload_image_from_url\": \"parameter\"\n }\n}\n"
@@ -0,0 +1,14 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: wp-directorist-avatar-ssrf-vulnerable
+  atespace: default
+  annotations:
+    openultrasast.io/git-commits: repo=77cfc9bc8b453f97ab7e720330706fa4ef056867
+spec:
+  git:
+  - name: repo
+    repo: https://github.com/sovware/directorist
+    dir: repo
+    depth: 1
@@ -0,0 +1,16 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: wp-gopay-log-filter-sqli-inputs
+  atespace: default
+spec:
+  files:
+  - path: candidates.json
+    content: "{\n \"candidates\": [\n  [\n   \"admin/views/log.php\",\n   \"<global>\",\n   35\n  ]\n ],\n \"family\": \"injection\",\n \"id\": \"wp-gopay-log-filter-sqli\"\n}\n"
+  - path: functions.json
+    content: "[\n {\n  \"function\": \"<global>\",\n  \"line\": 35,\n  \"path\": \"admin/views/log.php\"\n }\n]\n"
+  - path: case.json
+    content: "{\n \"family\": \"injection\",\n \"id\": \"wp-gopay-log-filter-sqli\",\n \"sites\": [\n  \"admin/views/log.php::<global>\"\n ]\n}\n"
+  - path: triage.json
+    content: "{\n \"candidates\": [\n  [\n   \"admin/views/log.php\",\n   \"<global>\",\n   35\n  ]\n ],\n \"kept\": [\n  [\n   \"admin/views/log.php\",\n   \"<global>\",\n   35\n  ]\n ],\n \"triage\": {\n  \"admin/views/log.php::<global>\": \"request\"\n }\n}\n"
@@ -0,0 +1,14 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: wp-gopay-log-filter-sqli-vulnerable
+  atespace: default
+  annotations:
+    openultrasast.io/git-commits: repo=626bc8b5f8d33de6eefd921e3a05ed52ac320bcd
+spec:
+  git:
+  - name: repo
+    repo: https://github.com/gopaycommunity/gopay-woocommerce-integration
+    dir: repo
+    depth: 1
@@ -0,0 +1,16 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: wp-groundhogg-confirm-redirect-inputs
+  atespace: default
+spec:
+  files:
+  - path: candidates.json
+    content: "{\n \"candidates\": [\n  [\n   \"templates/preferences.php\",\n   \"<global>\",\n   904\n  ]\n ],\n \"family\": \"untrusted_destination\",\n \"id\": \"wp-groundhogg-confirm-redirect\"\n}\n"
+  - path: functions.json
+    content: "[\n {\n  \"function\": \"<global>\",\n  \"line\": 904,\n  \"path\": \"templates/preferences.php\"\n }\n]\n"
+  - path: case.json
+    content: "{\n \"family\": \"untrusted_destination\",\n \"id\": \"wp-groundhogg-confirm-redirect\",\n \"sites\": [\n  \"templates/preferences.php::<global>\"\n ]\n}\n"
+  - path: triage.json
+    content: "{\n \"candidates\": [\n  [\n   \"templates/preferences.php\",\n   \"<global>\",\n   904\n  ]\n ],\n \"kept\": [\n  [\n   \"templates/preferences.php\",\n   \"<global>\",\n   904\n  ]\n ],\n \"triage\": {\n  \"templates/preferences.php::<global>\": \"request\"\n }\n}\n"
@@ -0,0 +1,14 @@
+# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --run validation-46`; do not edit, regenerate.
+apiVersion: ax.io/v1alpha1
+kind: Workspace
+metadata:
+  name: wp-groundhogg-confirm-redirect-vulnerable
+  atespace: default
+  annotations:
+    openultrasast.io/git-commits: repo=9472a1dd79d4556c40eece501a61930793f170d3
+spec:
+  git:
+  - name: repo
+    repo: https://github.com/groundhoggwp/groundhogg
+    dir: repo
+    depth: 1