marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-16 03:49:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(learn): candidate feature schema and builders (decision-engine task 1)

Browse Source 
learn/schema.py is the closed, typed allow-list of candidate features: 66 features over
11 instruments (language one-hot, quick rules with 23 mechanism buckets and a prior count,
engine, repo-facts, source span, entry-point distance, roles, delta, verify, agree, model
sinks), two profiles (static 57; plane adds verify, agree and model sinks for 66), schema_version and a feature-set digest.
No repository, path, file, function, rule or commit identity is a feature; site_match,
in_fix_range, fixed-pin alerts, case.json fields and costs are refused. Missing is not zero:
each record carries per-instrument state (ran | none | failed | not_applicable), and every
feature of an instrument that did not run is null.

learn/features.py builds records on the host (build_for_scan, whole repository or base..head
delta); plane/tasks/features.py builds them per case in a Run from the delivered artifacts,
dropping site_match and in_fix_range on read and ignoring fixed-pin alerts. The generator
adds a model-free `features` entry per case before `remember`, which stores the records as
`features` rows (re-validated). memory KINDS gains features, label, decision, experiment,
arm_outcome and experiment_result. The committed validation-46 manifests are regenerated
(entries appended; the first Run's entries are unchanged). The runner image must be rebuilt
and re-pinned before a Run executes the new task.

Proof on real artifacts (scratch store, not committed): the recorded validation-46 run gives
75 feature records over 15 cases (43 verify candidates plus vulnerable-pin alerts), each
case's vulnerable pin exported and read (0.5k-9k files); remember stored 75 features rows
beside 43 verdict, 84 alert, 61 unit_cost, 15 facts and 8 coverage rows.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo
This commit is contained in:
Marius Ciepluch
2026-09-30 18:38:04 +02:00
co-authored by Claude Opus 5.5
parent edcf145b00
commit d1896cb8e7
17 changed files with 2129 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files
plane/runs/validation-46.yaml
+285
View File
@@ -939,6 +939,24 @@ spec:
budget:
usd: 0
calls: 0
- name: budibase-mongo-template-nosqli-features
task: features-budibase-mongo-template-nosqli
inputs:
facts: budibase-mongo-template-nosqli-facts/facts.json
facts_summary: budibase-mongo-template-nosqli-facts/summary.json
pass_a: budibase-mongo-template-nosqli-va/units.jsonl
summary_a: budibase-mongo-template-nosqli-va/summary.json
pass_b: budibase-mongo-template-nosqli-vb/units.jsonl
summary_b: budibase-mongo-template-nosqli-vb/summary.json
pass_c: budibase-mongo-template-nosqli-vc/units.jsonl
summary_c: budibase-mongo-template-nosqli-vc/summary.json
agreed: budibase-mongo-template-nosqli-final/agreed.json
outputs:
- features.jsonl
- summary.json
budget:
usd: 0
calls: 0
- name: budibase-mongo-template-nosqli-remember
task: remember-budibase-mongo-template-nosqli
inputs:
@@ -951,11 +969,30 @@ spec:
pass_c: budibase-mongo-template-nosqli-vc/units.jsonl
summary_c: budibase-mongo-template-nosqli-vc/summary.json
agreed: budibase-mongo-template-nosqli-final/agreed.json
features: budibase-mongo-template-nosqli-features/features.jsonl
outputs:
- memory.jsonl
budget:
usd: 0
calls: 0
- name: cct-studio-server-cmdi-features
task: features-cct-studio-server-cmdi
inputs:
facts: cct-studio-server-cmdi-facts/facts.json
facts_summary: cct-studio-server-cmdi-facts/summary.json
pass_a: cct-studio-server-cmdi-va/units.jsonl
summary_a: cct-studio-server-cmdi-va/summary.json
pass_b: cct-studio-server-cmdi-vb/units.jsonl
summary_b: cct-studio-server-cmdi-vb/summary.json
pass_c: cct-studio-server-cmdi-vc/units.jsonl
summary_c: cct-studio-server-cmdi-vc/summary.json
agreed: cct-studio-server-cmdi-final/agreed.json
outputs:
- features.jsonl
- summary.json
budget:
usd: 0
calls: 0
- name: cct-studio-server-cmdi-remember
task: remember-cct-studio-server-cmdi
inputs:
@@ -968,11 +1005,30 @@ spec:
pass_c: cct-studio-server-cmdi-vc/units.jsonl
summary_c: cct-studio-server-cmdi-vc/summary.json
agreed: cct-studio-server-cmdi-final/agreed.json
features: cct-studio-server-cmdi-features/features.jsonl
outputs:
- memory.jsonl
budget:
usd: 0
calls: 0
- name: contextforge-prompt-ssti-features
task: features-contextforge-prompt-ssti
inputs:
facts: contextforge-prompt-ssti-facts/facts.json
facts_summary: contextforge-prompt-ssti-facts/summary.json
pass_a: contextforge-prompt-ssti-va/units.jsonl
summary_a: contextforge-prompt-ssti-va/summary.json
pass_b: contextforge-prompt-ssti-vb/units.jsonl
summary_b: contextforge-prompt-ssti-vb/summary.json
pass_c: contextforge-prompt-ssti-vc/units.jsonl
summary_c: contextforge-prompt-ssti-vc/summary.json
agreed: contextforge-prompt-ssti-final/agreed.json
outputs:
- features.jsonl
- summary.json
budget:
usd: 0
calls: 0
- name: contextforge-prompt-ssti-remember
task: remember-contextforge-prompt-ssti
inputs:
@@ -985,11 +1041,30 @@ spec:
pass_c: contextforge-prompt-ssti-vc/units.jsonl
summary_c: contextforge-prompt-ssti-vc/summary.json
agreed: contextforge-prompt-ssti-final/agreed.json
features: contextforge-prompt-ssti-features/features.jsonl
outputs:
- memory.jsonl
budget:
usd: 0
calls: 0
- name: froxlor-admin-ip-second-order-sqli-features
task: features-froxlor-admin-ip-second-order-sqli
inputs:
facts: froxlor-admin-ip-second-order-sqli-facts/facts.json
facts_summary: froxlor-admin-ip-second-order-sqli-facts/summary.json
pass_a: froxlor-admin-ip-second-order-sqli-va/units.jsonl
summary_a: froxlor-admin-ip-second-order-sqli-va/summary.json
pass_b: froxlor-admin-ip-second-order-sqli-vb/units.jsonl
summary_b: froxlor-admin-ip-second-order-sqli-vb/summary.json
pass_c: froxlor-admin-ip-second-order-sqli-vc/units.jsonl
summary_c: froxlor-admin-ip-second-order-sqli-vc/summary.json
agreed: froxlor-admin-ip-second-order-sqli-final/agreed.json
outputs:
- features.jsonl
- summary.json
budget:
usd: 0
calls: 0
- name: froxlor-admin-ip-second-order-sqli-remember
task: remember-froxlor-admin-ip-second-order-sqli
inputs:
@@ -1002,11 +1077,30 @@ spec:
pass_c: froxlor-admin-ip-second-order-sqli-vc/units.jsonl
summary_c: froxlor-admin-ip-second-order-sqli-vc/summary.json
agreed: froxlor-admin-ip-second-order-sqli-final/agreed.json
features: froxlor-admin-ip-second-order-sqli-features/features.jsonl
outputs:
- memory.jsonl
budget:
usd: 0
calls: 0
- name: fuxa-tdengine-escape-sqli-features
task: features-fuxa-tdengine-escape-sqli
inputs:
facts: fuxa-tdengine-escape-sqli-facts/facts.json
facts_summary: fuxa-tdengine-escape-sqli-facts/summary.json
pass_a: fuxa-tdengine-escape-sqli-va/units.jsonl
summary_a: fuxa-tdengine-escape-sqli-va/summary.json
pass_b: fuxa-tdengine-escape-sqli-vb/units.jsonl
summary_b: fuxa-tdengine-escape-sqli-vb/summary.json
pass_c: fuxa-tdengine-escape-sqli-vc/units.jsonl
summary_c: fuxa-tdengine-escape-sqli-vc/summary.json
agreed: fuxa-tdengine-escape-sqli-final/agreed.json
outputs:
- features.jsonl
- summary.json
budget:
usd: 0
calls: 0
- name: fuxa-tdengine-escape-sqli-remember
task: remember-fuxa-tdengine-escape-sqli
inputs:
@@ -1019,11 +1113,30 @@ spec:
pass_c: fuxa-tdengine-escape-sqli-vc/units.jsonl
summary_c: fuxa-tdengine-escape-sqli-vc/summary.json
agreed: fuxa-tdengine-escape-sqli-final/agreed.json
features: fuxa-tdengine-escape-sqli-features/features.jsonl
outputs:
- memory.jsonl
budget:
usd: 0
calls: 0
- name: lmdeploy-media-url-ssrf-features
task: features-lmdeploy-media-url-ssrf
inputs:
facts: lmdeploy-media-url-ssrf-facts/facts.json
facts_summary: lmdeploy-media-url-ssrf-facts/summary.json
pass_a: lmdeploy-media-url-ssrf-va/units.jsonl
summary_a: lmdeploy-media-url-ssrf-va/summary.json
pass_b: lmdeploy-media-url-ssrf-vb/units.jsonl
summary_b: lmdeploy-media-url-ssrf-vb/summary.json
pass_c: lmdeploy-media-url-ssrf-vc/units.jsonl
summary_c: lmdeploy-media-url-ssrf-vc/summary.json
agreed: lmdeploy-media-url-ssrf-final/agreed.json
outputs:
- features.jsonl
- summary.json
budget:
usd: 0
calls: 0
- name: lmdeploy-media-url-ssrf-remember
task: remember-lmdeploy-media-url-ssrf
inputs:
@@ -1036,11 +1149,30 @@ spec:
pass_c: lmdeploy-media-url-ssrf-vc/units.jsonl
summary_c: lmdeploy-media-url-ssrf-vc/summary.json
agreed: lmdeploy-media-url-ssrf-final/agreed.json
features: lmdeploy-media-url-ssrf-features/features.jsonl
outputs:
- memory.jsonl
budget:
usd: 0
calls: 0
- name: medplum-external-auth-open-redirect-features
task: features-medplum-external-auth-open-redirect
inputs:
facts: medplum-external-auth-open-redirect-facts/facts.json
facts_summary: medplum-external-auth-open-redirect-facts/summary.json
pass_a: medplum-external-auth-open-redirect-va/units.jsonl
summary_a: medplum-external-auth-open-redirect-va/summary.json
pass_b: medplum-external-auth-open-redirect-vb/units.jsonl
summary_b: medplum-external-auth-open-redirect-vb/summary.json
pass_c: medplum-external-auth-open-redirect-vc/units.jsonl
summary_c: medplum-external-auth-open-redirect-vc/summary.json
agreed: medplum-external-auth-open-redirect-final/agreed.json
outputs:
- features.jsonl
- summary.json
budget:
usd: 0
calls: 0
- name: medplum-external-auth-open-redirect-remember
task: remember-medplum-external-auth-open-redirect
inputs:
@@ -1053,11 +1185,30 @@ spec:
pass_c: medplum-external-auth-open-redirect-vc/units.jsonl
summary_c: medplum-external-auth-open-redirect-vc/summary.json
agreed: medplum-external-auth-open-redirect-final/agreed.json
features: medplum-external-auth-open-redirect-features/features.jsonl
outputs:
- memory.jsonl
budget:
usd: 0
calls: 0
- name: pgadmin-maintenance-sqli-features
task: features-pgadmin-maintenance-sqli
inputs:
facts: pgadmin-maintenance-sqli-facts/facts.json
facts_summary: pgadmin-maintenance-sqli-facts/summary.json
pass_a: pgadmin-maintenance-sqli-va/units.jsonl
summary_a: pgadmin-maintenance-sqli-va/summary.json
pass_b: pgadmin-maintenance-sqli-vb/units.jsonl
summary_b: pgadmin-maintenance-sqli-vb/summary.json
pass_c: pgadmin-maintenance-sqli-vc/units.jsonl
summary_c: pgadmin-maintenance-sqli-vc/summary.json
agreed: pgadmin-maintenance-sqli-final/agreed.json
outputs:
- features.jsonl
- summary.json
budget:
usd: 0
calls: 0
- name: pgadmin-maintenance-sqli-remember
task: remember-pgadmin-maintenance-sqli
inputs:
@@ -1070,11 +1221,30 @@ spec:
pass_c: pgadmin-maintenance-sqli-vc/units.jsonl
summary_c: pgadmin-maintenance-sqli-vc/summary.json
agreed: pgadmin-maintenance-sqli-final/agreed.json
features: pgadmin-maintenance-sqli-features/features.jsonl
outputs:
- memory.jsonl
budget:
usd: 0
calls: 0
- name: qwed-sympy-eval-features
task: features-qwed-sympy-eval
inputs:
facts: qwed-sympy-eval-facts/facts.json
facts_summary: qwed-sympy-eval-facts/summary.json
pass_a: qwed-sympy-eval-va/units.jsonl
summary_a: qwed-sympy-eval-va/summary.json
pass_b: qwed-sympy-eval-vb/units.jsonl
summary_b: qwed-sympy-eval-vb/summary.json
pass_c: qwed-sympy-eval-vc/units.jsonl
summary_c: qwed-sympy-eval-vc/summary.json
agreed: qwed-sympy-eval-final/agreed.json
outputs:
- features.jsonl
- summary.json
budget:
usd: 0
calls: 0
- name: qwed-sympy-eval-remember
task: remember-qwed-sympy-eval
inputs:
@@ -1087,11 +1257,30 @@ spec:
pass_c: qwed-sympy-eval-vc/units.jsonl
summary_c: qwed-sympy-eval-vc/summary.json
agreed: qwed-sympy-eval-final/agreed.json
features: qwed-sympy-eval-features/features.jsonl
outputs:
- memory.jsonl
budget:
usd: 0
calls: 0
- name: reactpress-findall-column-sqli-features
task: features-reactpress-findall-column-sqli
inputs:
facts: reactpress-findall-column-sqli-facts/facts.json
facts_summary: reactpress-findall-column-sqli-facts/summary.json
pass_a: reactpress-findall-column-sqli-va/units.jsonl
summary_a: reactpress-findall-column-sqli-va/summary.json
pass_b: reactpress-findall-column-sqli-vb/units.jsonl
summary_b: reactpress-findall-column-sqli-vb/summary.json
pass_c: reactpress-findall-column-sqli-vc/units.jsonl
summary_c: reactpress-findall-column-sqli-vc/summary.json
agreed: reactpress-findall-column-sqli-final/agreed.json
outputs:
- features.jsonl
- summary.json
budget:
usd: 0
calls: 0
- name: reactpress-findall-column-sqli-remember
task: remember-reactpress-findall-column-sqli
inputs:
@@ -1104,11 +1293,30 @@ spec:
pass_c: reactpress-findall-column-sqli-vc/units.jsonl
summary_c: reactpress-findall-column-sqli-vc/summary.json
agreed: reactpress-findall-column-sqli-final/agreed.json
features: reactpress-findall-column-sqli-features/features.jsonl
outputs:
- memory.jsonl
budget:
usd: 0
calls: 0
- name: unleash-addon-webhook-ssrf-features
task: features-unleash-addon-webhook-ssrf
inputs:
facts: unleash-addon-webhook-ssrf-facts/facts.json
facts_summary: unleash-addon-webhook-ssrf-facts/summary.json
pass_a: unleash-addon-webhook-ssrf-va/units.jsonl
summary_a: unleash-addon-webhook-ssrf-va/summary.json
pass_b: unleash-addon-webhook-ssrf-vb/units.jsonl
summary_b: unleash-addon-webhook-ssrf-vb/summary.json
pass_c: unleash-addon-webhook-ssrf-vc/units.jsonl
summary_c: unleash-addon-webhook-ssrf-vc/summary.json
agreed: unleash-addon-webhook-ssrf-final/agreed.json
outputs:
- features.jsonl
- summary.json
budget:
usd: 0
calls: 0
- name: unleash-addon-webhook-ssrf-remember
task: remember-unleash-addon-webhook-ssrf
inputs:
@@ -1121,11 +1329,30 @@ spec:
pass_c: unleash-addon-webhook-ssrf-vc/units.jsonl
summary_c: unleash-addon-webhook-ssrf-vc/summary.json
agreed: unleash-addon-webhook-ssrf-final/agreed.json
features: unleash-addon-webhook-ssrf-features/features.jsonl
outputs:
- memory.jsonl
budget:
usd: 0
calls: 0
- name: winml-cli-serve-cors-features
task: features-winml-cli-serve-cors
inputs:
facts: winml-cli-serve-cors-facts/facts.json
facts_summary: winml-cli-serve-cors-facts/summary.json
pass_a: winml-cli-serve-cors-va/units.jsonl
summary_a: winml-cli-serve-cors-va/summary.json
pass_b: winml-cli-serve-cors-vb/units.jsonl
summary_b: winml-cli-serve-cors-vb/summary.json
pass_c: winml-cli-serve-cors-vc/units.jsonl
summary_c: winml-cli-serve-cors-vc/summary.json
agreed: winml-cli-serve-cors-final/agreed.json
outputs:
- features.jsonl
- summary.json
budget:
usd: 0
calls: 0
- name: winml-cli-serve-cors-remember
task: remember-winml-cli-serve-cors
inputs:
@@ -1138,11 +1365,30 @@ spec:
pass_c: winml-cli-serve-cors-vc/units.jsonl
summary_c: winml-cli-serve-cors-vc/summary.json
agreed: winml-cli-serve-cors-final/agreed.json
features: winml-cli-serve-cors-features/features.jsonl
outputs:
- memory.jsonl
budget:
usd: 0
calls: 0
- name: wp-directorist-avatar-ssrf-features
task: features-wp-directorist-avatar-ssrf
inputs:
facts: wp-directorist-avatar-ssrf-facts/facts.json
facts_summary: wp-directorist-avatar-ssrf-facts/summary.json
pass_a: wp-directorist-avatar-ssrf-va/units.jsonl
summary_a: wp-directorist-avatar-ssrf-va/summary.json
pass_b: wp-directorist-avatar-ssrf-vb/units.jsonl
summary_b: wp-directorist-avatar-ssrf-vb/summary.json
pass_c: wp-directorist-avatar-ssrf-vc/units.jsonl
summary_c: wp-directorist-avatar-ssrf-vc/summary.json
agreed: wp-directorist-avatar-ssrf-final/agreed.json
outputs:
- features.jsonl
- summary.json
budget:
usd: 0
calls: 0
- name: wp-directorist-avatar-ssrf-remember
task: remember-wp-directorist-avatar-ssrf
inputs:
@@ -1155,11 +1401,30 @@ spec:
pass_c: wp-directorist-avatar-ssrf-vc/units.jsonl
summary_c: wp-directorist-avatar-ssrf-vc/summary.json
agreed: wp-directorist-avatar-ssrf-final/agreed.json
features: wp-directorist-avatar-ssrf-features/features.jsonl
outputs:
- memory.jsonl
budget:
usd: 0
calls: 0
- name: wp-gopay-log-filter-sqli-features
task: features-wp-gopay-log-filter-sqli
inputs:
facts: wp-gopay-log-filter-sqli-facts/facts.json
facts_summary: wp-gopay-log-filter-sqli-facts/summary.json
pass_a: wp-gopay-log-filter-sqli-va/units.jsonl
summary_a: wp-gopay-log-filter-sqli-va/summary.json
pass_b: wp-gopay-log-filter-sqli-vb/units.jsonl
summary_b: wp-gopay-log-filter-sqli-vb/summary.json
pass_c: wp-gopay-log-filter-sqli-vc/units.jsonl
summary_c: wp-gopay-log-filter-sqli-vc/summary.json
agreed: wp-gopay-log-filter-sqli-final/agreed.json
outputs:
- features.jsonl
- summary.json
budget:
usd: 0
calls: 0
- name: wp-gopay-log-filter-sqli-remember
task: remember-wp-gopay-log-filter-sqli
inputs:
@@ -1172,11 +1437,30 @@ spec:
pass_c: wp-gopay-log-filter-sqli-vc/units.jsonl
summary_c: wp-gopay-log-filter-sqli-vc/summary.json
agreed: wp-gopay-log-filter-sqli-final/agreed.json
features: wp-gopay-log-filter-sqli-features/features.jsonl
outputs:
- memory.jsonl
budget:
usd: 0
calls: 0
- name: wp-groundhogg-confirm-redirect-features
task: features-wp-groundhogg-confirm-redirect
inputs:
facts: wp-groundhogg-confirm-redirect-facts/facts.json
facts_summary: wp-groundhogg-confirm-redirect-facts/summary.json
pass_a: wp-groundhogg-confirm-redirect-va/units.jsonl
summary_a: wp-groundhogg-confirm-redirect-va/summary.json
pass_b: wp-groundhogg-confirm-redirect-vb/units.jsonl
summary_b: wp-groundhogg-confirm-redirect-vb/summary.json
pass_c: wp-groundhogg-confirm-redirect-vc/units.jsonl
summary_c: wp-groundhogg-confirm-redirect-vc/summary.json
agreed: wp-groundhogg-confirm-redirect-final/agreed.json
outputs:
- features.jsonl
- summary.json
budget:
usd: 0
calls: 0
- name: wp-groundhogg-confirm-redirect-remember
task: remember-wp-groundhogg-confirm-redirect
inputs:
@@ -1189,6 +1473,7 @@ spec:
pass_c: wp-groundhogg-confirm-redirect-vc/units.jsonl
summary_c: wp-groundhogg-confirm-redirect-vc/summary.json
agreed: wp-groundhogg-confirm-redirect-final/agreed.json
features: wp-groundhogg-confirm-redirect-features/features.jsonl
outputs:
- memory.jsonl
budget:
plane/tasks/features.yaml
+18
View File
@@ -0,0 +1,18 @@
# features (learned-decision-engine design section 1): one allow-listed feature record per candidate. No model.
# The template of the per-case Tasks (bound to the case's vulnerable Workspace for the functions' spans and the
# entry-point distance); `remember` stores the records as `features` rows. The image is digest-pinned.
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: features
atespace: default
spec:
image: "localhost:5001/ousast-runner@sha256:e9964977659c4dcea7d8b25390ca0e16368ac901dd076aa6138df8303a0bb699"
command: ["features"]
resources:
requests:
cpu: "250m"
memory: "512Mi"
limits:
cpu: "1"
memory: "1Gi"
plane/tasks/validation-46.yaml
+345
View File
@@ -2236,6 +2236,29 @@ spec:
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: features-budibase-mongo-template-nosqli
atespace: default
spec:
image: localhost:5001/ousast-runner@sha256:e9964977659c4dcea7d8b25390ca0e16368ac901dd076aa6138df8303a0bb699
command:
- features
env:
- name: OUSAST_WORKSPACE_DIR
value: /workspace/case/repo
resources:
requests:
cpu: 250m
memory: 512Mi
limits:
cpu: '1'
memory: 1Gi
workspaces:
- name: budibase-mongo-template-nosqli-vulnerable
path: /workspace/case
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: remember-budibase-mongo-template-nosqli
atespace: default
@@ -2261,6 +2284,29 @@ spec:
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: features-cct-studio-server-cmdi
atespace: default
spec:
image: localhost:5001/ousast-runner@sha256:e9964977659c4dcea7d8b25390ca0e16368ac901dd076aa6138df8303a0bb699
command:
- features
env:
- name: OUSAST_WORKSPACE_DIR
value: /workspace/case/repo
resources:
requests:
cpu: 250m
memory: 512Mi
limits:
cpu: '1'
memory: 1Gi
workspaces:
- name: cct-studio-server-cmdi-vulnerable
path: /workspace/case
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: remember-cct-studio-server-cmdi
atespace: default
@@ -2286,6 +2332,29 @@ spec:
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: features-contextforge-prompt-ssti
atespace: default
spec:
image: localhost:5001/ousast-runner@sha256:e9964977659c4dcea7d8b25390ca0e16368ac901dd076aa6138df8303a0bb699
command:
- features
env:
- name: OUSAST_WORKSPACE_DIR
value: /workspace/case/repo
resources:
requests:
cpu: 250m
memory: 512Mi
limits:
cpu: '1'
memory: 1Gi
workspaces:
- name: contextforge-prompt-ssti-vulnerable
path: /workspace/case
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: remember-contextforge-prompt-ssti
atespace: default
@@ -2311,6 +2380,29 @@ spec:
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: features-froxlor-admin-ip-second-order-sqli
atespace: default
spec:
image: localhost:5001/ousast-runner@sha256:e9964977659c4dcea7d8b25390ca0e16368ac901dd076aa6138df8303a0bb699
command:
- features
env:
- name: OUSAST_WORKSPACE_DIR
value: /workspace/case/repo
resources:
requests:
cpu: 250m
memory: 512Mi
limits:
cpu: '1'
memory: 1Gi
workspaces:
- name: froxlor-admin-ip-second-order-sqli-vulnerable
path: /workspace/case
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: remember-froxlor-admin-ip-second-order-sqli
atespace: default
@@ -2336,6 +2428,29 @@ spec:
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: features-fuxa-tdengine-escape-sqli
atespace: default
spec:
image: localhost:5001/ousast-runner@sha256:e9964977659c4dcea7d8b25390ca0e16368ac901dd076aa6138df8303a0bb699
command:
- features
env:
- name: OUSAST_WORKSPACE_DIR
value: /workspace/case/repo
resources:
requests:
cpu: 250m
memory: 512Mi
limits:
cpu: '1'
memory: 1Gi
workspaces:
- name: fuxa-tdengine-escape-sqli-vulnerable
path: /workspace/case
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: remember-fuxa-tdengine-escape-sqli
atespace: default
@@ -2361,6 +2476,29 @@ spec:
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: features-lmdeploy-media-url-ssrf
atespace: default
spec:
image: localhost:5001/ousast-runner@sha256:e9964977659c4dcea7d8b25390ca0e16368ac901dd076aa6138df8303a0bb699
command:
- features
env:
- name: OUSAST_WORKSPACE_DIR
value: /workspace/case/repo
resources:
requests:
cpu: 250m
memory: 512Mi
limits:
cpu: '1'
memory: 1Gi
workspaces:
- name: lmdeploy-media-url-ssrf-vulnerable
path: /workspace/case
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: remember-lmdeploy-media-url-ssrf
atespace: default
@@ -2386,6 +2524,29 @@ spec:
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: features-medplum-external-auth-open-redirect
atespace: default
spec:
image: localhost:5001/ousast-runner@sha256:e9964977659c4dcea7d8b25390ca0e16368ac901dd076aa6138df8303a0bb699
command:
- features
env:
- name: OUSAST_WORKSPACE_DIR
value: /workspace/case/repo
resources:
requests:
cpu: 250m
memory: 512Mi
limits:
cpu: '1'
memory: 1Gi
workspaces:
- name: medplum-external-auth-open-redirect-vulnerable
path: /workspace/case
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: remember-medplum-external-auth-open-redirect
atespace: default
@@ -2411,6 +2572,29 @@ spec:
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: features-pgadmin-maintenance-sqli
atespace: default
spec:
image: localhost:5001/ousast-runner@sha256:e9964977659c4dcea7d8b25390ca0e16368ac901dd076aa6138df8303a0bb699
command:
- features
env:
- name: OUSAST_WORKSPACE_DIR
value: /workspace/case/repo
resources:
requests:
cpu: 250m
memory: 512Mi
limits:
cpu: '1'
memory: 1Gi
workspaces:
- name: pgadmin-maintenance-sqli-vulnerable
path: /workspace/case
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: remember-pgadmin-maintenance-sqli
atespace: default
@@ -2436,6 +2620,29 @@ spec:
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: features-qwed-sympy-eval
atespace: default
spec:
image: localhost:5001/ousast-runner@sha256:e9964977659c4dcea7d8b25390ca0e16368ac901dd076aa6138df8303a0bb699
command:
- features
env:
- name: OUSAST_WORKSPACE_DIR
value: /workspace/case/repo
resources:
requests:
cpu: 250m
memory: 512Mi
limits:
cpu: '1'
memory: 1Gi
workspaces:
- name: qwed-sympy-eval-vulnerable
path: /workspace/case
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: remember-qwed-sympy-eval
atespace: default
@@ -2461,6 +2668,29 @@ spec:
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: features-reactpress-findall-column-sqli
atespace: default
spec:
image: localhost:5001/ousast-runner@sha256:e9964977659c4dcea7d8b25390ca0e16368ac901dd076aa6138df8303a0bb699
command:
- features
env:
- name: OUSAST_WORKSPACE_DIR
value: /workspace/case/repo
resources:
requests:
cpu: 250m
memory: 512Mi
limits:
cpu: '1'
memory: 1Gi
workspaces:
- name: reactpress-findall-column-sqli-vulnerable
path: /workspace/case
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: remember-reactpress-findall-column-sqli
atespace: default
@@ -2486,6 +2716,29 @@ spec:
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: features-unleash-addon-webhook-ssrf
atespace: default
spec:
image: localhost:5001/ousast-runner@sha256:e9964977659c4dcea7d8b25390ca0e16368ac901dd076aa6138df8303a0bb699
command:
- features
env:
- name: OUSAST_WORKSPACE_DIR
value: /workspace/case/repo
resources:
requests:
cpu: 250m
memory: 512Mi
limits:
cpu: '1'
memory: 1Gi
workspaces:
- name: unleash-addon-webhook-ssrf-vulnerable
path: /workspace/case
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: remember-unleash-addon-webhook-ssrf
atespace: default
@@ -2511,6 +2764,29 @@ spec:
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: features-winml-cli-serve-cors
atespace: default
spec:
image: localhost:5001/ousast-runner@sha256:e9964977659c4dcea7d8b25390ca0e16368ac901dd076aa6138df8303a0bb699
command:
- features
env:
- name: OUSAST_WORKSPACE_DIR
value: /workspace/case/repo
resources:
requests:
cpu: 250m
memory: 512Mi
limits:
cpu: '1'
memory: 1Gi
workspaces:
- name: winml-cli-serve-cors-vulnerable
path: /workspace/case
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: remember-winml-cli-serve-cors
atespace: default
@@ -2536,6 +2812,29 @@ spec:
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: features-wp-directorist-avatar-ssrf
atespace: default
spec:
image: localhost:5001/ousast-runner@sha256:e9964977659c4dcea7d8b25390ca0e16368ac901dd076aa6138df8303a0bb699
command:
- features
env:
- name: OUSAST_WORKSPACE_DIR
value: /workspace/case/repo
resources:
requests:
cpu: 250m
memory: 512Mi
limits:
cpu: '1'
memory: 1Gi
workspaces:
- name: wp-directorist-avatar-ssrf-vulnerable
path: /workspace/case
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: remember-wp-directorist-avatar-ssrf
atespace: default
@@ -2561,6 +2860,29 @@ spec:
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: features-wp-gopay-log-filter-sqli
atespace: default
spec:
image: localhost:5001/ousast-runner@sha256:e9964977659c4dcea7d8b25390ca0e16368ac901dd076aa6138df8303a0bb699
command:
- features
env:
- name: OUSAST_WORKSPACE_DIR
value: /workspace/case/repo
resources:
requests:
cpu: 250m
memory: 512Mi
limits:
cpu: '1'
memory: 1Gi
workspaces:
- name: wp-gopay-log-filter-sqli-vulnerable
path: /workspace/case
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: remember-wp-gopay-log-filter-sqli
atespace: default
@@ -2586,6 +2908,29 @@ spec:
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: features-wp-groundhogg-confirm-redirect
atespace: default
spec:
image: localhost:5001/ousast-runner@sha256:e9964977659c4dcea7d8b25390ca0e16368ac901dd076aa6138df8303a0bb699
command:
- features
env:
- name: OUSAST_WORKSPACE_DIR
value: /workspace/case/repo
resources:
requests:
cpu: 250m
memory: 512Mi
limits:
cpu: '1'
memory: 1Gi
workspaces:
- name: wp-groundhogg-confirm-redirect-vulnerable
path: /workspace/case
---
apiVersion: ax.io/v1alpha1
kind: Task
metadata:
name: remember-wp-groundhogg-confirm-redirect
atespace: default