mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 19:59:26 +00:00
Marius CiepluchandClaude Opus 5.5
34da916030
`ousast plane harvest` (plane/harvest.py) writes two Runs over a label snapshot:
verify a/b + agree on the verify-family units (both sides of each labelled pair as
an opaque files-only Workspace, candidates outside the hunt's root, no declared
sites; v1 and dev-php pins with repo-facts first) and model roles on the candidate
files (pair excerpts grouped, one Task per population pin). Budgets sum under the
ceiling by construction. New roles task template; the generator re-pins it.
Spent by attribution: verify $2.54 (1961 calls, 150 units, 182 hunts per pass),
roles $1.40 (1034 calls, 799 files, 0 unclassified chunks); DeepSeek balance
19.63 -> 18.23. Engine on the pair corpus (benchmarks/learn/engine_pairs.py,
frozen e6ed785, one 3g container) is PARTIAL: 384 of 686 sides at commit, still
running; unfinished sides stay missing. benchmarks/learn/build_features.py built
1712 static+plane records into the memory store; counts-only record under
benchmarks/measurements/2026-10-01-decision-engine-harvest/.
source/roles parts are `none`, not `failed`, for a language without a declaration
pattern (C). ops/ax/README: Substrate golden-actor disk leak and the inline
Workspace limit (~20 KB).
Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo
2956 lines
73 KiB
YAML
2956 lines
73 KiB
YAML
# generated by `ousast plane workspaces benchmarks/independent/population-v2.toml --validation-set ~/ousast-results/independent-v2-sets/validation.json --candidates ~/ousast-results/independent-v2-modelsinks --triage ~/ousast-results/independent-v2-batched-check/scans --repos ~/.cache/openultrasast/independent --run validation-46 --runner-image ~/.cache/ousast/ax-src/runner-image`; do not edit, regenerate.
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-budibase-mongo-template-nosqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/memory-key: '{"candidates":"b4ef709df34ab08c","image":"sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884","pin":"b7e63df737eede85d951aa9665b0c0778ece7ccb","repo":"github.com/Budibase/budibase"}'
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: budibase-mongo-template-nosqli-vulnerable
|
|
path: /workspace/case
|
|
- name: budibase-mongo-template-nosqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-budibase-mongo-template-nosqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: budibase-mongo-template-nosqli-vulnerable
|
|
path: /workspace/case
|
|
- name: budibase-mongo-template-nosqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-budibase-mongo-template-nosqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: budibase-mongo-template-nosqli-vulnerable
|
|
path: /workspace/case
|
|
- name: budibase-mongo-template-nosqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-budibase-mongo-template-nosqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: budibase-mongo-template-nosqli
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: budibase-mongo-template-nosqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-cct-studio-server-cmdi
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/memory-key: '{"candidates":"6c9fa4a6e47cda37","image":"sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884","pin":"acdb5893412a81eaec9862ee24a4613bf296ab45","repo":"github.com/davila7/claude-code-templates"}'
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: cct-studio-server-cmdi-vulnerable
|
|
path: /workspace/case
|
|
- name: cct-studio-server-cmdi-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-cct-studio-server-cmdi
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: cct-studio-server-cmdi-vulnerable
|
|
path: /workspace/case
|
|
- name: cct-studio-server-cmdi-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-cct-studio-server-cmdi
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: cct-studio-server-cmdi-vulnerable
|
|
path: /workspace/case
|
|
- name: cct-studio-server-cmdi-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-cct-studio-server-cmdi
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: cct-studio-server-cmdi
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: cct-studio-server-cmdi-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-contextforge-prompt-ssti
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/memory-key: '{"candidates":"b272af6456664ebc","image":"sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884","pin":"0f8e0ad679f1fff685f486e17f642ac863c8ca9e","repo":"github.com/IBM/mcp-context-forge"}'
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: contextforge-prompt-ssti-vulnerable
|
|
path: /workspace/case
|
|
- name: contextforge-prompt-ssti-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-contextforge-prompt-ssti
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: contextforge-prompt-ssti-vulnerable
|
|
path: /workspace/case
|
|
- name: contextforge-prompt-ssti-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-contextforge-prompt-ssti
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: contextforge-prompt-ssti-vulnerable
|
|
path: /workspace/case
|
|
- name: contextforge-prompt-ssti-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-contextforge-prompt-ssti
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: contextforge-prompt-ssti
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: contextforge-prompt-ssti-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-froxlor-admin-ip-second-order-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/memory-key: '{"candidates":"c52240d980ef0105","image":"sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884","pin":"9bf03de643a2edee4642bfc6c94db1f05253da02","repo":"github.com/froxlor/froxlor"}'
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: froxlor-admin-ip-second-order-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: froxlor-admin-ip-second-order-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-froxlor-admin-ip-second-order-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: froxlor-admin-ip-second-order-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: froxlor-admin-ip-second-order-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-froxlor-admin-ip-second-order-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: froxlor-admin-ip-second-order-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: froxlor-admin-ip-second-order-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-froxlor-admin-ip-second-order-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: froxlor-admin-ip-second-order-sqli
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: froxlor-admin-ip-second-order-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-fuxa-tdengine-escape-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/memory-key: '{"candidates":"ec699ee54d38a8ee","image":"sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884","pin":"193a888f8e3f805325072829b1644a2c768c948b","repo":"github.com/frangoteam/FUXA"}'
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: fuxa-tdengine-escape-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: fuxa-tdengine-escape-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-fuxa-tdengine-escape-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: fuxa-tdengine-escape-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: fuxa-tdengine-escape-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-fuxa-tdengine-escape-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: fuxa-tdengine-escape-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: fuxa-tdengine-escape-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-fuxa-tdengine-escape-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: fuxa-tdengine-escape-sqli
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: fuxa-tdengine-escape-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-lmdeploy-media-url-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/memory-key: '{"candidates":"1337c9c717f5ac87","image":"sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884","pin":"71648d239c978452720a6d6692fe914efc8a7b94","repo":"github.com/InternLM/lmdeploy"}'
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: lmdeploy-media-url-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: lmdeploy-media-url-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-lmdeploy-media-url-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: lmdeploy-media-url-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: lmdeploy-media-url-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-lmdeploy-media-url-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: lmdeploy-media-url-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: lmdeploy-media-url-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-lmdeploy-media-url-ssrf
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: lmdeploy-media-url-ssrf
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: lmdeploy-media-url-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-medplum-external-auth-open-redirect
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/memory-key: '{"candidates":"17ba609d5b1a1a00","image":"sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884","pin":"5d4a8654b02aa67c444f96ae1eb5663c09854006","repo":"github.com/medplum/medplum"}'
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: medplum-external-auth-open-redirect-vulnerable
|
|
path: /workspace/case
|
|
- name: medplum-external-auth-open-redirect-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-medplum-external-auth-open-redirect
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: medplum-external-auth-open-redirect-vulnerable
|
|
path: /workspace/case
|
|
- name: medplum-external-auth-open-redirect-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-medplum-external-auth-open-redirect
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: medplum-external-auth-open-redirect-vulnerable
|
|
path: /workspace/case
|
|
- name: medplum-external-auth-open-redirect-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-medplum-external-auth-open-redirect
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: medplum-external-auth-open-redirect
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: medplum-external-auth-open-redirect-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-pgadmin-maintenance-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/memory-key: '{"candidates":"7f1b83a88024c2d4","image":"sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884","pin":"d112dc3b962218efc3613fa727d54f0fc5b1d527","repo":"github.com/pgadmin-org/pgadmin4"}'
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: pgadmin-maintenance-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: pgadmin-maintenance-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-pgadmin-maintenance-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: pgadmin-maintenance-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: pgadmin-maintenance-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-pgadmin-maintenance-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: pgadmin-maintenance-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: pgadmin-maintenance-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-pgadmin-maintenance-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: pgadmin-maintenance-sqli
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: pgadmin-maintenance-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-qwed-sympy-eval
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/memory-key: '{"candidates":"f071e8db5f5517ab","image":"sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884","pin":"06801f68cbf9c9b5e54cc17f2a61cb2792da7a26","repo":"github.com/QWED-AI/qwed-verification"}'
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: qwed-sympy-eval-vulnerable
|
|
path: /workspace/case
|
|
- name: qwed-sympy-eval-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-qwed-sympy-eval
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: qwed-sympy-eval-vulnerable
|
|
path: /workspace/case
|
|
- name: qwed-sympy-eval-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-qwed-sympy-eval
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: qwed-sympy-eval-vulnerable
|
|
path: /workspace/case
|
|
- name: qwed-sympy-eval-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-qwed-sympy-eval
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: qwed-sympy-eval
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: qwed-sympy-eval-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-reactpress-findall-column-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/memory-key: '{"candidates":"ecb82a10249c6fed","image":"sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884","pin":"c3dd10681b3d2b5e224f7ac647b3769557603975","repo":"github.com/fecommunity/reactpress"}'
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: reactpress-findall-column-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: reactpress-findall-column-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-reactpress-findall-column-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: reactpress-findall-column-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: reactpress-findall-column-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-reactpress-findall-column-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: reactpress-findall-column-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: reactpress-findall-column-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-reactpress-findall-column-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: reactpress-findall-column-sqli
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: reactpress-findall-column-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-unleash-addon-webhook-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/memory-key: '{"candidates":"4d3debd51fd86f9c","image":"sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884","pin":"b9f3217d327f24094b4352130baa30387f85cffe","repo":"github.com/Unleash/unleash"}'
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: unleash-addon-webhook-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: unleash-addon-webhook-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-unleash-addon-webhook-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: unleash-addon-webhook-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: unleash-addon-webhook-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-unleash-addon-webhook-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: unleash-addon-webhook-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: unleash-addon-webhook-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-unleash-addon-webhook-ssrf
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: unleash-addon-webhook-ssrf
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: unleash-addon-webhook-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-winml-cli-serve-cors
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/memory-key: '{"candidates":"e3b0c44298fc1c14","image":"sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884","pin":"02179d185f0e3ac23518236b5ca1f61fd37ef680","repo":"github.com/microsoft/winml-cli"}'
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: winml-cli-serve-cors-vulnerable
|
|
path: /workspace/case
|
|
- name: winml-cli-serve-cors-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-winml-cli-serve-cors
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: winml-cli-serve-cors-vulnerable
|
|
path: /workspace/case
|
|
- name: winml-cli-serve-cors-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-winml-cli-serve-cors
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: winml-cli-serve-cors-vulnerable
|
|
path: /workspace/case
|
|
- name: winml-cli-serve-cors-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-winml-cli-serve-cors
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: winml-cli-serve-cors
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: winml-cli-serve-cors-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-wp-directorist-avatar-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/memory-key: '{"candidates":"d6963021f588f39e","image":"sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884","pin":"77cfc9bc8b453f97ab7e720330706fa4ef056867","repo":"github.com/sovware/directorist"}'
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: wp-directorist-avatar-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-directorist-avatar-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-wp-directorist-avatar-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-directorist-avatar-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-directorist-avatar-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-wp-directorist-avatar-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-directorist-avatar-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-directorist-avatar-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-wp-directorist-avatar-ssrf
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: wp-directorist-avatar-ssrf
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: wp-directorist-avatar-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-wp-gopay-log-filter-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/memory-key: '{"candidates":"fde4d17144a13d73","image":"sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884","pin":"626bc8b5f8d33de6eefd921e3a05ed52ac320bcd","repo":"github.com/gopaycommunity/gopay-woocommerce-integration"}'
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: wp-gopay-log-filter-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-gopay-log-filter-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-wp-gopay-log-filter-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-gopay-log-filter-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-gopay-log-filter-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-wp-gopay-log-filter-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-gopay-log-filter-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-gopay-log-filter-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-wp-gopay-log-filter-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: wp-gopay-log-filter-sqli
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: wp-gopay-log-filter-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: repo-facts-wp-groundhogg-confirm-redirect
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/memory-key: '{"candidates":"fde4d17144a13d73","image":"sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884","pin":"9472a1dd79d4556c40eece501a61930793f170d3","repo":"github.com/groundhoggwp/groundhogg"}'
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- repo-facts
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/functions.json
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1280Mi
|
|
workspaces:
|
|
- name: wp-groundhogg-confirm-redirect-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-groundhogg-confirm-redirect-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-a-wp-groundhogg-confirm-redirect
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: a
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-groundhogg-confirm-redirect-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-groundhogg-confirm-redirect-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-b-wp-groundhogg-confirm-redirect
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: b
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-groundhogg-confirm-redirect-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-groundhogg-confirm-redirect-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: agree-wp-groundhogg-confirm-redirect
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- agree
|
|
env:
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_INPUT_SITES
|
|
value: /workspace/inputs/case.json
|
|
- name: OUSAST_CASE_ID
|
|
value: wp-groundhogg-confirm-redirect
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: wp-groundhogg-confirm-redirect-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-c-budibase-mongo-template-nosqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: c
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: budibase-mongo-template-nosqli-vulnerable
|
|
path: /workspace/case
|
|
- name: budibase-mongo-template-nosqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-c-cct-studio-server-cmdi
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: c
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: cct-studio-server-cmdi-vulnerable
|
|
path: /workspace/case
|
|
- name: cct-studio-server-cmdi-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-c-contextforge-prompt-ssti
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: c
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: contextforge-prompt-ssti-vulnerable
|
|
path: /workspace/case
|
|
- name: contextforge-prompt-ssti-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-c-froxlor-admin-ip-second-order-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: c
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: froxlor-admin-ip-second-order-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: froxlor-admin-ip-second-order-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-c-fuxa-tdengine-escape-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: c
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: fuxa-tdengine-escape-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: fuxa-tdengine-escape-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-c-lmdeploy-media-url-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: c
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: lmdeploy-media-url-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: lmdeploy-media-url-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-c-medplum-external-auth-open-redirect
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: c
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: medplum-external-auth-open-redirect-vulnerable
|
|
path: /workspace/case
|
|
- name: medplum-external-auth-open-redirect-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-c-pgadmin-maintenance-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: c
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: pgadmin-maintenance-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: pgadmin-maintenance-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-c-qwed-sympy-eval
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: c
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: qwed-sympy-eval-vulnerable
|
|
path: /workspace/case
|
|
- name: qwed-sympy-eval-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-c-reactpress-findall-column-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: c
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: reactpress-findall-column-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: reactpress-findall-column-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-c-unleash-addon-webhook-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: c
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: unleash-addon-webhook-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: unleash-addon-webhook-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-c-winml-cli-serve-cors
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: c
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: winml-cli-serve-cors-vulnerable
|
|
path: /workspace/case
|
|
- name: winml-cli-serve-cors-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-c-wp-directorist-avatar-ssrf
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: c
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-directorist-avatar-ssrf-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-directorist-avatar-ssrf-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-c-wp-gopay-log-filter-sqli
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: c
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-gopay-log-filter-sqli-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-gopay-log-filter-sqli-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: verify-c-wp-groundhogg-confirm-redirect
|
|
atespace: default
|
|
annotations:
|
|
openultrasast.io/model: deepseek-flash
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- verify
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
- name: OUSAST_INPUT_CANDIDATES
|
|
value: /workspace/inputs/candidates.json
|
|
- name: OUSAST_PASS
|
|
value: c
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 384Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-groundhogg-confirm-redirect-vulnerable
|
|
path: /workspace/case
|
|
- name: wp-groundhogg-confirm-redirect-inputs
|
|
path: /workspace/inputs
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: features-budibase-mongo-template-nosqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- features
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: budibase-mongo-template-nosqli-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: remember-budibase-mongo-template-nosqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- remember
|
|
env:
|
|
- name: OUSAST_POPULATION
|
|
value: population-v2
|
|
- name: OUSAST_SPLIT
|
|
value: validation
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: budibase-mongo-template-nosqli-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: features-cct-studio-server-cmdi
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- features
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: cct-studio-server-cmdi-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: remember-cct-studio-server-cmdi
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- remember
|
|
env:
|
|
- name: OUSAST_POPULATION
|
|
value: population-v2
|
|
- name: OUSAST_SPLIT
|
|
value: validation
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: cct-studio-server-cmdi-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: features-contextforge-prompt-ssti
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- features
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: contextforge-prompt-ssti-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: remember-contextforge-prompt-ssti
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- remember
|
|
env:
|
|
- name: OUSAST_POPULATION
|
|
value: population-v2
|
|
- name: OUSAST_SPLIT
|
|
value: validation
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: contextforge-prompt-ssti-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: features-froxlor-admin-ip-second-order-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- features
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: froxlor-admin-ip-second-order-sqli-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: remember-froxlor-admin-ip-second-order-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- remember
|
|
env:
|
|
- name: OUSAST_POPULATION
|
|
value: population-v2
|
|
- name: OUSAST_SPLIT
|
|
value: validation
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: froxlor-admin-ip-second-order-sqli-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: features-fuxa-tdengine-escape-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- features
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: fuxa-tdengine-escape-sqli-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: remember-fuxa-tdengine-escape-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- remember
|
|
env:
|
|
- name: OUSAST_POPULATION
|
|
value: population-v2
|
|
- name: OUSAST_SPLIT
|
|
value: validation
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: fuxa-tdengine-escape-sqli-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: features-lmdeploy-media-url-ssrf
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- features
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: lmdeploy-media-url-ssrf-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: remember-lmdeploy-media-url-ssrf
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- remember
|
|
env:
|
|
- name: OUSAST_POPULATION
|
|
value: population-v2
|
|
- name: OUSAST_SPLIT
|
|
value: validation
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: lmdeploy-media-url-ssrf-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: features-medplum-external-auth-open-redirect
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- features
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: medplum-external-auth-open-redirect-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: remember-medplum-external-auth-open-redirect
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- remember
|
|
env:
|
|
- name: OUSAST_POPULATION
|
|
value: population-v2
|
|
- name: OUSAST_SPLIT
|
|
value: validation
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: medplum-external-auth-open-redirect-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: features-pgadmin-maintenance-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- features
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: pgadmin-maintenance-sqli-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: remember-pgadmin-maintenance-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- remember
|
|
env:
|
|
- name: OUSAST_POPULATION
|
|
value: population-v2
|
|
- name: OUSAST_SPLIT
|
|
value: validation
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: pgadmin-maintenance-sqli-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: features-qwed-sympy-eval
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- features
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: qwed-sympy-eval-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: remember-qwed-sympy-eval
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- remember
|
|
env:
|
|
- name: OUSAST_POPULATION
|
|
value: population-v2
|
|
- name: OUSAST_SPLIT
|
|
value: validation
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: qwed-sympy-eval-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: features-reactpress-findall-column-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- features
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: reactpress-findall-column-sqli-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: remember-reactpress-findall-column-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- remember
|
|
env:
|
|
- name: OUSAST_POPULATION
|
|
value: population-v2
|
|
- name: OUSAST_SPLIT
|
|
value: validation
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: reactpress-findall-column-sqli-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: features-unleash-addon-webhook-ssrf
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- features
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: unleash-addon-webhook-ssrf-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: remember-unleash-addon-webhook-ssrf
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- remember
|
|
env:
|
|
- name: OUSAST_POPULATION
|
|
value: population-v2
|
|
- name: OUSAST_SPLIT
|
|
value: validation
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: unleash-addon-webhook-ssrf-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: features-winml-cli-serve-cors
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- features
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: winml-cli-serve-cors-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: remember-winml-cli-serve-cors
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- remember
|
|
env:
|
|
- name: OUSAST_POPULATION
|
|
value: population-v2
|
|
- name: OUSAST_SPLIT
|
|
value: validation
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: winml-cli-serve-cors-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: features-wp-directorist-avatar-ssrf
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- features
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-directorist-avatar-ssrf-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: remember-wp-directorist-avatar-ssrf
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- remember
|
|
env:
|
|
- name: OUSAST_POPULATION
|
|
value: population-v2
|
|
- name: OUSAST_SPLIT
|
|
value: validation
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: wp-directorist-avatar-ssrf-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: features-wp-gopay-log-filter-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- features
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-gopay-log-filter-sqli-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: remember-wp-gopay-log-filter-sqli
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- remember
|
|
env:
|
|
- name: OUSAST_POPULATION
|
|
value: population-v2
|
|
- name: OUSAST_SPLIT
|
|
value: validation
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: wp-gopay-log-filter-sqli-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: features-wp-groundhogg-confirm-redirect
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- features
|
|
env:
|
|
- name: OUSAST_WORKSPACE_DIR
|
|
value: /workspace/case/repo
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 1Gi
|
|
workspaces:
|
|
- name: wp-groundhogg-confirm-redirect-vulnerable
|
|
path: /workspace/case
|
|
---
|
|
apiVersion: ax.io/v1alpha1
|
|
kind: Task
|
|
metadata:
|
|
name: remember-wp-groundhogg-confirm-redirect
|
|
atespace: default
|
|
spec:
|
|
image: localhost:5001/ousast-runner@sha256:412db0a1504af8f1b23a395af8d1dcbd152c1bb6d16594f2b733067163a31884
|
|
command:
|
|
- remember
|
|
env:
|
|
- name: OUSAST_POPULATION
|
|
value: population-v2
|
|
- name: OUSAST_SPLIT
|
|
value: validation
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: '1'
|
|
memory: 512Mi
|
|
workspaces:
|
|
- name: wp-groundhogg-confirm-redirect-vulnerable
|
|
path: /workspace/case
|