mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
Marius CiepluchandClaude Opus 5.5
3d0d83c585
On the live cluster the case clone ran at boot: the golden boot had no egress policy, and the real actor was still being restored, so both TLS handshakes to GitHub were cut. After the start the actor is RUNNING under its policy (the delivery the same minute went through). Adds the one-case check Run (a subset of validation-46) and re-pins the task manifests to the current runner digest. Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo
45 lines
1.1 KiB
YAML
45 lines
1.1 KiB
YAML
# one-case check before the validation-46 measurement (task 8); a subset of runs/validation-46.yaml
|
|
apiVersion: openultrasast.io/v1alpha1
|
|
kind: Run
|
|
metadata:
|
|
name: check-lmdeploy
|
|
spec:
|
|
tasks:
|
|
- name: lmdeploy-media-url-ssrf-facts
|
|
task: repo-facts-lmdeploy-media-url-ssrf
|
|
outputs:
|
|
- facts.json
|
|
budget: &id001
|
|
usd: 0
|
|
calls: 0
|
|
serialize: repo-facts
|
|
- name: lmdeploy-media-url-ssrf-va
|
|
task: verify-a-lmdeploy-media-url-ssrf
|
|
inputs:
|
|
facts: lmdeploy-media-url-ssrf-facts/facts.json
|
|
outputs:
|
|
- units.jsonl
|
|
- summary.json
|
|
budget:
|
|
usd: 0.02
|
|
calls: 8
|
|
- name: lmdeploy-media-url-ssrf-vb
|
|
task: verify-b-lmdeploy-media-url-ssrf
|
|
inputs:
|
|
facts: lmdeploy-media-url-ssrf-facts/facts.json
|
|
outputs:
|
|
- units.jsonl
|
|
- summary.json
|
|
budget:
|
|
usd: 0.02
|
|
calls: 8
|
|
- name: lmdeploy-media-url-ssrf-agree
|
|
task: agree-lmdeploy-media-url-ssrf
|
|
inputs:
|
|
pass_a: lmdeploy-media-url-ssrf-va/units.jsonl
|
|
pass_b: lmdeploy-media-url-ssrf-vb/units.jsonl
|
|
outputs:
|
|
- agreed.json
|
|
- disputed.json
|
|
budget: *id001
|