mirror of
https://github.com/j3ssie/osmedeus.git
synced 2026-09-26 11:34:55 +02:00
j3ssie
f5840272c5
Major features: - Add run registry for tracking active runs with PID management - Add API-based run cancellation with process termination - Add event trigger input vars syntax for multi-variable extraction - Add filter_functions with utility function support in triggers - Add event envelope injection for full event context in workflows - Add write coordinator for batched database operations API improvements: - Add logout endpoint and diffs endpoints for assets/vulnerabilities - Add step-results listing endpoint - Update schedule model with target, workspace, params fields - Change run_id to run_uuid across API responses Performance: - Add compiled JS program caching for 60-80% faster loop conditions - Add parallel shard rendering for 20-40% faster workflow startup - Add memory-mapped I/O for large file line counting - Add efficient output buffer combining in runners - Add mtime-based cache invalidation for workflow loader Other changes: - Rename trigger field from trigger to triggers in workflow YAML - Disable pongo2 HTML autoescape for shell command templates - Update JWT expiration default to 1440 minutes (1 day) - Change CORS default to reflect-origin for credentials support - Add source_type field to events (run, eval, api) - Skip copying core Unix tools to external-binaries
67 lines
1.9 KiB
YAML
67 lines
1.9 KiB
YAML
# Vulnerability Report Generator Workflow
|
|
# Generates a formatted security report using the sample template.
|
|
#
|
|
# Usage:
|
|
# osmedeus run -m generate-vuln-report -t example.com
|
|
#
|
|
# This workflow assumes you have:
|
|
# 1. Run a scan that populated the database with assets/vulnerabilities
|
|
# 2. The sample-report-template.md exists in your Data directory
|
|
#
|
|
# Template location: {{Data}}/templates/sample-report-template.md
|
|
# Output location: {{Output}}/reports/vulnerability-report.md
|
|
|
|
name: generate-vuln-report
|
|
kind: module
|
|
description: Generate vulnerability report from scan results
|
|
tags: report,vulnerability,markdown
|
|
|
|
params:
|
|
- name: target
|
|
required: true
|
|
description: Target that was scanned
|
|
|
|
steps:
|
|
# Ensure reports and templates directories exist
|
|
- name: setup-dirs
|
|
type: bash
|
|
command: mkdir -p {{Output}}/reports {{Output}}/templates
|
|
|
|
# Generate a summary report with just high-severity findings
|
|
- name: create-high-severity-template
|
|
type: bash
|
|
command: |
|
|
cat > {{Output}}/templates/high-severity-report.md << 'EOF'
|
|
# High Severity Findings - {{TargetSpace}}
|
|
|
|
**Target**: {{Target}}
|
|
**Date**: {{TaskDate}}
|
|
|
|
## Critical & High Vulnerabilities
|
|
|
|
```osm-func
|
|
db_select_vulnerabilities_filtered("{{TargetSpace}}", "critical", "", "markdown")
|
|
```
|
|
|
|
```osm-func
|
|
db_select_vulnerabilities_filtered("{{TargetSpace}}", "high", "", "markdown")
|
|
```
|
|
|
|
---
|
|
*Report generated by Osmedeus*
|
|
EOF
|
|
|
|
- name: generate-high-severity-report
|
|
type: function
|
|
function: 'render_markdown_report("{{Output}}/templates/high-severity-report.md", "{{Output}}/reports/high-severity-findings.md")'
|
|
|
|
# Log completion
|
|
- name: report-complete
|
|
type: function
|
|
function: 'log_info("Report generated at: {{Output}}/reports/high-severity-findings.md")'
|
|
|
|
# Show preview
|
|
- name: preview-report
|
|
type: bash
|
|
command: cat {{Output}}/reports/high-severity-findings.md
|