# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --repos ~/.cache/openultrasast/independent --run validation-46 --runner-image ~/.cache/ousast/ax-src/runner-image`; do not edit, regenerate. apiVersion: ax.io/v1alpha1 kind: Task metadata: name: repo-facts-budibase-mongo-template-nosqli atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - repo-facts env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/functions.json resources: requests: cpu: 250m memory: 512Mi limits: cpu: '1' memory: 1280Mi workspaces: - name: budibase-mongo-template-nosqli-vulnerable path: /workspace/case - name: budibase-mongo-template-nosqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-a-budibase-mongo-template-nosqli atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: a resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: budibase-mongo-template-nosqli-vulnerable path: /workspace/case - name: budibase-mongo-template-nosqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-b-budibase-mongo-template-nosqli atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: b resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: budibase-mongo-template-nosqli-vulnerable path: /workspace/case - name: budibase-mongo-template-nosqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: agree-budibase-mongo-template-nosqli atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - agree env: - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_INPUT_SITES value: /workspace/inputs/case.json - name: OUSAST_CASE_ID value: budibase-mongo-template-nosqli resources: requests: cpu: 100m memory: 256Mi limits: cpu: '1' memory: 512Mi workspaces: - name: budibase-mongo-template-nosqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: repo-facts-cct-studio-server-cmdi atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - repo-facts env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/functions.json resources: requests: cpu: 250m memory: 512Mi limits: cpu: '1' memory: 1280Mi workspaces: - name: cct-studio-server-cmdi-vulnerable path: /workspace/case - name: cct-studio-server-cmdi-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-a-cct-studio-server-cmdi atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: a resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: cct-studio-server-cmdi-vulnerable path: /workspace/case - name: cct-studio-server-cmdi-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-b-cct-studio-server-cmdi atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: b resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: cct-studio-server-cmdi-vulnerable path: /workspace/case - name: cct-studio-server-cmdi-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: agree-cct-studio-server-cmdi atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - agree env: - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_INPUT_SITES value: /workspace/inputs/case.json - name: OUSAST_CASE_ID value: cct-studio-server-cmdi resources: requests: cpu: 100m memory: 256Mi limits: cpu: '1' memory: 512Mi workspaces: - name: cct-studio-server-cmdi-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: repo-facts-contextforge-prompt-ssti atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - repo-facts env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/functions.json resources: requests: cpu: 250m memory: 512Mi limits: cpu: '1' memory: 1280Mi workspaces: - name: contextforge-prompt-ssti-vulnerable path: /workspace/case - name: contextforge-prompt-ssti-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-a-contextforge-prompt-ssti atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: a resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: contextforge-prompt-ssti-vulnerable path: /workspace/case - name: contextforge-prompt-ssti-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-b-contextforge-prompt-ssti atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: b resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: contextforge-prompt-ssti-vulnerable path: /workspace/case - name: contextforge-prompt-ssti-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: agree-contextforge-prompt-ssti atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - agree env: - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_INPUT_SITES value: /workspace/inputs/case.json - name: OUSAST_CASE_ID value: contextforge-prompt-ssti resources: requests: cpu: 100m memory: 256Mi limits: cpu: '1' memory: 512Mi workspaces: - name: contextforge-prompt-ssti-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: repo-facts-froxlor-admin-ip-second-order-sqli atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - repo-facts env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/functions.json resources: requests: cpu: 250m memory: 512Mi limits: cpu: '1' memory: 1280Mi workspaces: - name: froxlor-admin-ip-second-order-sqli-vulnerable path: /workspace/case - name: froxlor-admin-ip-second-order-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-a-froxlor-admin-ip-second-order-sqli atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: a resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: froxlor-admin-ip-second-order-sqli-vulnerable path: /workspace/case - name: froxlor-admin-ip-second-order-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-b-froxlor-admin-ip-second-order-sqli atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: b resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: froxlor-admin-ip-second-order-sqli-vulnerable path: /workspace/case - name: froxlor-admin-ip-second-order-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: agree-froxlor-admin-ip-second-order-sqli atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - agree env: - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_INPUT_SITES value: /workspace/inputs/case.json - name: OUSAST_CASE_ID value: froxlor-admin-ip-second-order-sqli resources: requests: cpu: 100m memory: 256Mi limits: cpu: '1' memory: 512Mi workspaces: - name: froxlor-admin-ip-second-order-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: repo-facts-fuxa-tdengine-escape-sqli atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - repo-facts env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/functions.json resources: requests: cpu: 250m memory: 512Mi limits: cpu: '1' memory: 1280Mi workspaces: - name: fuxa-tdengine-escape-sqli-vulnerable path: /workspace/case - name: fuxa-tdengine-escape-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-a-fuxa-tdengine-escape-sqli atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: a resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: fuxa-tdengine-escape-sqli-vulnerable path: /workspace/case - name: fuxa-tdengine-escape-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-b-fuxa-tdengine-escape-sqli atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: b resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: fuxa-tdengine-escape-sqli-vulnerable path: /workspace/case - name: fuxa-tdengine-escape-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: agree-fuxa-tdengine-escape-sqli atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - agree env: - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_INPUT_SITES value: /workspace/inputs/case.json - name: OUSAST_CASE_ID value: fuxa-tdengine-escape-sqli resources: requests: cpu: 100m memory: 256Mi limits: cpu: '1' memory: 512Mi workspaces: - name: fuxa-tdengine-escape-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: repo-facts-lmdeploy-media-url-ssrf atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - repo-facts env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/functions.json resources: requests: cpu: 250m memory: 512Mi limits: cpu: '1' memory: 1280Mi workspaces: - name: lmdeploy-media-url-ssrf-vulnerable path: /workspace/case - name: lmdeploy-media-url-ssrf-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-a-lmdeploy-media-url-ssrf atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: a resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: lmdeploy-media-url-ssrf-vulnerable path: /workspace/case - name: lmdeploy-media-url-ssrf-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-b-lmdeploy-media-url-ssrf atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: b resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: lmdeploy-media-url-ssrf-vulnerable path: /workspace/case - name: lmdeploy-media-url-ssrf-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: agree-lmdeploy-media-url-ssrf atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - agree env: - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_INPUT_SITES value: /workspace/inputs/case.json - name: OUSAST_CASE_ID value: lmdeploy-media-url-ssrf resources: requests: cpu: 100m memory: 256Mi limits: cpu: '1' memory: 512Mi workspaces: - name: lmdeploy-media-url-ssrf-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: repo-facts-medplum-external-auth-open-redirect atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - repo-facts env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/functions.json resources: requests: cpu: 250m memory: 512Mi limits: cpu: '1' memory: 1280Mi workspaces: - name: medplum-external-auth-open-redirect-vulnerable path: /workspace/case - name: medplum-external-auth-open-redirect-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-a-medplum-external-auth-open-redirect atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: a resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: medplum-external-auth-open-redirect-vulnerable path: /workspace/case - name: medplum-external-auth-open-redirect-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-b-medplum-external-auth-open-redirect atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: b resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: medplum-external-auth-open-redirect-vulnerable path: /workspace/case - name: medplum-external-auth-open-redirect-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: agree-medplum-external-auth-open-redirect atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - agree env: - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_INPUT_SITES value: /workspace/inputs/case.json - name: OUSAST_CASE_ID value: medplum-external-auth-open-redirect resources: requests: cpu: 100m memory: 256Mi limits: cpu: '1' memory: 512Mi workspaces: - name: medplum-external-auth-open-redirect-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: repo-facts-pgadmin-maintenance-sqli atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - repo-facts env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/functions.json resources: requests: cpu: 250m memory: 512Mi limits: cpu: '1' memory: 1280Mi workspaces: - name: pgadmin-maintenance-sqli-vulnerable path: /workspace/case - name: pgadmin-maintenance-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-a-pgadmin-maintenance-sqli atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: a resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: pgadmin-maintenance-sqli-vulnerable path: /workspace/case - name: pgadmin-maintenance-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-b-pgadmin-maintenance-sqli atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: b resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: pgadmin-maintenance-sqli-vulnerable path: /workspace/case - name: pgadmin-maintenance-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: agree-pgadmin-maintenance-sqli atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - agree env: - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_INPUT_SITES value: /workspace/inputs/case.json - name: OUSAST_CASE_ID value: pgadmin-maintenance-sqli resources: requests: cpu: 100m memory: 256Mi limits: cpu: '1' memory: 512Mi workspaces: - name: pgadmin-maintenance-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: repo-facts-qwed-sympy-eval atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - repo-facts env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/functions.json resources: requests: cpu: 250m memory: 512Mi limits: cpu: '1' memory: 1280Mi workspaces: - name: qwed-sympy-eval-vulnerable path: /workspace/case - name: qwed-sympy-eval-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-a-qwed-sympy-eval atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: a resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: qwed-sympy-eval-vulnerable path: /workspace/case - name: qwed-sympy-eval-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-b-qwed-sympy-eval atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: b resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: qwed-sympy-eval-vulnerable path: /workspace/case - name: qwed-sympy-eval-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: agree-qwed-sympy-eval atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - agree env: - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_INPUT_SITES value: /workspace/inputs/case.json - name: OUSAST_CASE_ID value: qwed-sympy-eval resources: requests: cpu: 100m memory: 256Mi limits: cpu: '1' memory: 512Mi workspaces: - name: qwed-sympy-eval-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: repo-facts-reactpress-findall-column-sqli atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - repo-facts env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/functions.json resources: requests: cpu: 250m memory: 512Mi limits: cpu: '1' memory: 1280Mi workspaces: - name: reactpress-findall-column-sqli-vulnerable path: /workspace/case - name: reactpress-findall-column-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-a-reactpress-findall-column-sqli atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: a resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: reactpress-findall-column-sqli-vulnerable path: /workspace/case - name: reactpress-findall-column-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-b-reactpress-findall-column-sqli atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: b resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: reactpress-findall-column-sqli-vulnerable path: /workspace/case - name: reactpress-findall-column-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: agree-reactpress-findall-column-sqli atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - agree env: - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_INPUT_SITES value: /workspace/inputs/case.json - name: OUSAST_CASE_ID value: reactpress-findall-column-sqli resources: requests: cpu: 100m memory: 256Mi limits: cpu: '1' memory: 512Mi workspaces: - name: reactpress-findall-column-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: repo-facts-unleash-addon-webhook-ssrf atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - repo-facts env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/functions.json resources: requests: cpu: 250m memory: 512Mi limits: cpu: '1' memory: 1280Mi workspaces: - name: unleash-addon-webhook-ssrf-vulnerable path: /workspace/case - name: unleash-addon-webhook-ssrf-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-a-unleash-addon-webhook-ssrf atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: a resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: unleash-addon-webhook-ssrf-vulnerable path: /workspace/case - name: unleash-addon-webhook-ssrf-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-b-unleash-addon-webhook-ssrf atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: b resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: unleash-addon-webhook-ssrf-vulnerable path: /workspace/case - name: unleash-addon-webhook-ssrf-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: agree-unleash-addon-webhook-ssrf atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - agree env: - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_INPUT_SITES value: /workspace/inputs/case.json - name: OUSAST_CASE_ID value: unleash-addon-webhook-ssrf resources: requests: cpu: 100m memory: 256Mi limits: cpu: '1' memory: 512Mi workspaces: - name: unleash-addon-webhook-ssrf-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: repo-facts-winml-cli-serve-cors atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - repo-facts env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/functions.json resources: requests: cpu: 250m memory: 512Mi limits: cpu: '1' memory: 1280Mi workspaces: - name: winml-cli-serve-cors-vulnerable path: /workspace/case - name: winml-cli-serve-cors-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-a-winml-cli-serve-cors atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: a resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: winml-cli-serve-cors-vulnerable path: /workspace/case - name: winml-cli-serve-cors-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-b-winml-cli-serve-cors atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: b resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: winml-cli-serve-cors-vulnerable path: /workspace/case - name: winml-cli-serve-cors-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: agree-winml-cli-serve-cors atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - agree env: - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_INPUT_SITES value: /workspace/inputs/case.json - name: OUSAST_CASE_ID value: winml-cli-serve-cors resources: requests: cpu: 100m memory: 256Mi limits: cpu: '1' memory: 512Mi workspaces: - name: winml-cli-serve-cors-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: repo-facts-wp-directorist-avatar-ssrf atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - repo-facts env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/functions.json resources: requests: cpu: 250m memory: 512Mi limits: cpu: '1' memory: 1280Mi workspaces: - name: wp-directorist-avatar-ssrf-vulnerable path: /workspace/case - name: wp-directorist-avatar-ssrf-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-a-wp-directorist-avatar-ssrf atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: a resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: wp-directorist-avatar-ssrf-vulnerable path: /workspace/case - name: wp-directorist-avatar-ssrf-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-b-wp-directorist-avatar-ssrf atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: b resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: wp-directorist-avatar-ssrf-vulnerable path: /workspace/case - name: wp-directorist-avatar-ssrf-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: agree-wp-directorist-avatar-ssrf atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - agree env: - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_INPUT_SITES value: /workspace/inputs/case.json - name: OUSAST_CASE_ID value: wp-directorist-avatar-ssrf resources: requests: cpu: 100m memory: 256Mi limits: cpu: '1' memory: 512Mi workspaces: - name: wp-directorist-avatar-ssrf-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: repo-facts-wp-gopay-log-filter-sqli atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - repo-facts env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/functions.json resources: requests: cpu: 250m memory: 512Mi limits: cpu: '1' memory: 1280Mi workspaces: - name: wp-gopay-log-filter-sqli-vulnerable path: /workspace/case - name: wp-gopay-log-filter-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-a-wp-gopay-log-filter-sqli atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: a resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: wp-gopay-log-filter-sqli-vulnerable path: /workspace/case - name: wp-gopay-log-filter-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-b-wp-gopay-log-filter-sqli atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: b resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: wp-gopay-log-filter-sqli-vulnerable path: /workspace/case - name: wp-gopay-log-filter-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: agree-wp-gopay-log-filter-sqli atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - agree env: - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_INPUT_SITES value: /workspace/inputs/case.json - name: OUSAST_CASE_ID value: wp-gopay-log-filter-sqli resources: requests: cpu: 100m memory: 256Mi limits: cpu: '1' memory: 512Mi workspaces: - name: wp-gopay-log-filter-sqli-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: repo-facts-wp-groundhogg-confirm-redirect atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - repo-facts env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/functions.json resources: requests: cpu: 250m memory: 512Mi limits: cpu: '1' memory: 1280Mi workspaces: - name: wp-groundhogg-confirm-redirect-vulnerable path: /workspace/case - name: wp-groundhogg-confirm-redirect-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-a-wp-groundhogg-confirm-redirect atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: a resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: wp-groundhogg-confirm-redirect-vulnerable path: /workspace/case - name: wp-groundhogg-confirm-redirect-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: verify-b-wp-groundhogg-confirm-redirect atespace: default annotations: openultrasast.io/model: deepseek-flash spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - verify env: - name: OUSAST_WORKSPACE_DIR value: /workspace/case/repo - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_PASS value: b resources: requests: cpu: 250m memory: 384Mi limits: cpu: '1' memory: 1Gi workspaces: - name: wp-groundhogg-confirm-redirect-vulnerable path: /workspace/case - name: wp-groundhogg-confirm-redirect-inputs path: /workspace/inputs --- apiVersion: ax.io/v1alpha1 kind: Task metadata: name: agree-wp-groundhogg-confirm-redirect atespace: default spec: image: localhost:5001/ousast-runner@sha256:200e335877b52d68ea0bc53b4c9ba49ef2ee19e8a5ec2c874148b969123ef7ab command: - agree env: - name: OUSAST_INPUT_CANDIDATES value: /workspace/inputs/candidates.json - name: OUSAST_INPUT_SITES value: /workspace/inputs/case.json - name: OUSAST_CASE_ID value: wp-groundhogg-confirm-redirect resources: requests: cpu: 100m memory: 256Mi limits: cpu: '1' memory: 512Mi workspaces: - name: wp-groundhogg-confirm-redirect-inputs path: /workspace/inputs