mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
Marius CiepluchandClaude Opus 5.5
3d0d83c585
On the live cluster the case clone ran at boot: the golden boot had no egress policy, and the real actor was still being restored, so both TLS handshakes to GitHub were cut. After the start the actor is RUNNING under its policy (the delivery the same minute went through). Adds the one-case check Run (a subset of validation-46) and re-pins the task manifests to the current runner digest. Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo
1741 lines
42 KiB
YAML
1741 lines
42 KiB
YAML
# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --repos ~/.cache/openultrasast/independent --run validation-46 --runner-image ~/.cache/ousast/ax-src/runner-image`; do not edit, regenerate.
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-budibase-mongo-template-nosqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: budibase-mongo-template-nosqli-vulnerable
|
|
path: /workspace/case
|
|
- name: budibase-mongo-template-nosqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-budibase-mongo-template-nosqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: budibase-mongo-template-nosqli-vulnerable
|
|
path: /workspace/case
|
|
- name: budibase-mongo-template-nosqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-budibase-mongo-template-nosqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: budibase-mongo-template-nosqli-vulnerable
|
|
path: /workspace/case
|
|
- name: budibase-mongo-template-nosqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-budibase-mongo-template-nosqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: budibase-mongo-template-nosqli
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: budibase-mongo-template-nosqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-cct-studio-server-cmdi
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: cct-studio-server-cmdi-vulnerable
|
|
path: /workspace/case
|
|
- name: cct-studio-server-cmdi-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-cct-studio-server-cmdi
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: cct-studio-server-cmdi-vulnerable
|
|
path: /workspace/case
|
|
- name: cct-studio-server-cmdi-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-cct-studio-server-cmdi
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: cct-studio-server-cmdi-vulnerable
|
|
path: /workspace/case
|
|
- name: cct-studio-server-cmdi-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-cct-studio-server-cmdi
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: cct-studio-server-cmdi
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: cct-studio-server-cmdi-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-contextforge-prompt-ssti
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: contextforge-prompt-ssti-vulnerable
|
|
path: /workspace/case
|
|
- name: contextforge-prompt-ssti-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-contextforge-prompt-ssti
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: contextforge-prompt-ssti-vulnerable
|
|
path: /workspace/case
|
|
- name: contextforge-prompt-ssti-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-contextforge-prompt-ssti
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: contextforge-prompt-ssti-vulnerable
|
|
path: /workspace/case
|
|
- name: contextforge-prompt-ssti-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-contextforge-prompt-ssti
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: contextforge-prompt-ssti
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: contextforge-prompt-ssti-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-froxlor-admin-ip-second-order-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: froxlor-admin-ip-second-order-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: froxlor-admin-ip-second-order-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-froxlor-admin-ip-second-order-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: froxlor-admin-ip-second-order-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: froxlor-admin-ip-second-order-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-froxlor-admin-ip-second-order-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: froxlor-admin-ip-second-order-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: froxlor-admin-ip-second-order-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-froxlor-admin-ip-second-order-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: froxlor-admin-ip-second-order-sqli
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: froxlor-admin-ip-second-order-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-fuxa-tdengine-escape-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: fuxa-tdengine-escape-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: fuxa-tdengine-escape-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-fuxa-tdengine-escape-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: fuxa-tdengine-escape-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: fuxa-tdengine-escape-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-fuxa-tdengine-escape-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: fuxa-tdengine-escape-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: fuxa-tdengine-escape-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-fuxa-tdengine-escape-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: fuxa-tdengine-escape-sqli
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: fuxa-tdengine-escape-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-lmdeploy-media-url-ssrf
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: lmdeploy-media-url-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: lmdeploy-media-url-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-lmdeploy-media-url-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: lmdeploy-media-url-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: lmdeploy-media-url-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-lmdeploy-media-url-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: lmdeploy-media-url-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: lmdeploy-media-url-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-lmdeploy-media-url-ssrf
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: lmdeploy-media-url-ssrf
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: lmdeploy-media-url-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-medplum-external-auth-open-redirect
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: medplum-external-auth-open-redirect-vulnerable
|
|
path: /workspace/case
|
|
- name: medplum-external-auth-open-redirect-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-medplum-external-auth-open-redirect
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: medplum-external-auth-open-redirect-vulnerable
|
|
path: /workspace/case
|
|
- name: medplum-external-auth-open-redirect-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-medplum-external-auth-open-redirect
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: medplum-external-auth-open-redirect-vulnerable
|
|
path: /workspace/case
|
|
- name: medplum-external-auth-open-redirect-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-medplum-external-auth-open-redirect
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: medplum-external-auth-open-redirect
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: medplum-external-auth-open-redirect-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-pgadmin-maintenance-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: pgadmin-maintenance-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: pgadmin-maintenance-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-pgadmin-maintenance-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: pgadmin-maintenance-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: pgadmin-maintenance-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-pgadmin-maintenance-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: pgadmin-maintenance-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: pgadmin-maintenance-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-pgadmin-maintenance-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: pgadmin-maintenance-sqli
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: pgadmin-maintenance-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-qwed-sympy-eval
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: qwed-sympy-eval-vulnerable
|
|
path: /workspace/case
|
|
- name: qwed-sympy-eval-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-qwed-sympy-eval
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: qwed-sympy-eval-vulnerable
|
|
path: /workspace/case
|
|
- name: qwed-sympy-eval-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-qwed-sympy-eval
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: qwed-sympy-eval-vulnerable
|
|
path: /workspace/case
|
|
- name: qwed-sympy-eval-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-qwed-sympy-eval
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: qwed-sympy-eval
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: qwed-sympy-eval-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-reactpress-findall-column-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: reactpress-findall-column-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: reactpress-findall-column-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-reactpress-findall-column-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: reactpress-findall-column-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: reactpress-findall-column-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-reactpress-findall-column-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: reactpress-findall-column-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: reactpress-findall-column-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-reactpress-findall-column-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: reactpress-findall-column-sqli
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: reactpress-findall-column-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-unleash-addon-webhook-ssrf
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: unleash-addon-webhook-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: unleash-addon-webhook-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-unleash-addon-webhook-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: unleash-addon-webhook-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: unleash-addon-webhook-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-unleash-addon-webhook-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: unleash-addon-webhook-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: unleash-addon-webhook-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-unleash-addon-webhook-ssrf
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: unleash-addon-webhook-ssrf
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: unleash-addon-webhook-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-winml-cli-serve-cors
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: winml-cli-serve-cors-vulnerable
|
|
path: /workspace/case
|
|
- name: winml-cli-serve-cors-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-winml-cli-serve-cors
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: winml-cli-serve-cors-vulnerable
|
|
path: /workspace/case
|
|
- name: winml-cli-serve-cors-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-winml-cli-serve-cors
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: winml-cli-serve-cors-vulnerable
|
|
path: /workspace/case
|
|
- name: winml-cli-serve-cors-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-winml-cli-serve-cors
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: winml-cli-serve-cors
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: winml-cli-serve-cors-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-wp-directorist-avatar-ssrf
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: wp-directorist-avatar-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-directorist-avatar-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-wp-directorist-avatar-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-directorist-avatar-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-directorist-avatar-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-wp-directorist-avatar-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-directorist-avatar-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-directorist-avatar-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-wp-directorist-avatar-ssrf
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: wp-directorist-avatar-ssrf
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: wp-directorist-avatar-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-wp-gopay-log-filter-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: wp-gopay-log-filter-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-gopay-log-filter-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-wp-gopay-log-filter-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-gopay-log-filter-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-gopay-log-filter-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-wp-gopay-log-filter-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-gopay-log-filter-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-gopay-log-filter-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-wp-gopay-log-filter-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: wp-gopay-log-filter-sqli
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: wp-gopay-log-filter-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-wp-groundhogg-confirm-redirect
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: wp-groundhogg-confirm-redirect-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-groundhogg-confirm-redirect-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-wp-groundhogg-confirm-redirect
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-groundhogg-confirm-redirect-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-groundhogg-confirm-redirect-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-wp-groundhogg-confirm-redirect
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-groundhogg-confirm-redirect-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-groundhogg-confirm-redirect-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-wp-groundhogg-confirm-redirect
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:c58503666eee0bf296d44a7326862b8e7207edf397f4fdf1d02c3c2f27373e76
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: wp-groundhogg-confirm-redirect
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: wp-groundhogg-confirm-redirect-inputs
|
|
path: /workspace/inputs
|