mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 11:49:28 +00:00
Marius CiepluchandClaude Opus 5.5
c8b418c34c
Live on kind with the runner image that carries 2.2 (ousast-runner@sha256:d2a55293...; templates and validation-46 Tasks repinned, 128 lines; kind-images.json updated): the smoke Run on store delivery finished in 26 s and 24 s; the tar was PUT to runs/ax-e2e-smoke/facts/output.tar (10240 B) and collected 2 s later; read back from the store its members (facts.json 451 B, summary.json 238 B, units.jsonl 291 B) equal the extracted files; facts.json, summary.json and done.json (149 B) re-put, state.json (350 B) mirrored; a rerun from an empty results root seeded state.json from the store and finished in 2 s without resubmitting. The actor's egress policy read back live: one tlsPassthrough rule on 443 naming the store host, nothing else. `ousast plane status ax-e2e-smoke` printed the table each time. Record: benchmarks/measurements/2026-10-02-k8s-02-store-delivery/record.json with the smoke outputs, store read-back and policy beside it. Task 2.6 (receiver removal) is paused by the maintainer's reprioritisation. Gates: pytest 2031 passed, 42 skipped, exit 0; ruff check 0; ruff format 0; mypy 0. (The first run, at 0.97 GiB free disk, failed 11 tests and errored 5 on the FileStore's 1 GiB free-space refusal; rerun after the disk was freed.) Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo
19 lines
673 B
YAML
19 lines
673 B
YAML
# alerts (harnessx-removal Req 6.3, design section 6): quick-mode rules (enabled and shadow) on a case's vulnerable
|
|
# and fixed pins, each alert attributed to its enclosing function and marked inside or outside the fix. No model.
|
|
# Heavy like repo-facts (a full-tree scan per pin): the Run serializes it. The image is digest-pinned.
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: alerts
|
|
atespace: default
|
|
spec:
|
|
image: "localhost:5001/ousast-runner@sha256:d2a55293999cc34581ef1f02a1ffb0c2dd8fc0cbe001ac952df81600e868f019"
|
|
command: ["alerts"]
|
|
resources:
|
|
requests:
|
|
cpu: "250m"
|
|
memory: "512Mi"
|
|
limits:
|
|
cpu: "1"
|
|
memory: "1280Mi"
|