securereview / openenv.yaml
sameerkatte
Pass openenv validate: add multi-mode deployment + runtime endpoints
8d618ab
Raw
History Blame Contribute Delete
995 Bytes
spec_version: 1
name: securereview
type: space
runtime: fastapi
app: app.main:app
port: 7860
version: "1.0.0"
description: "AI Security Code Review Environment — evaluates an agent's ability to identify security vulnerabilities across dependency supply chains, infrastructure-as-code, and database migrations"
author: "Team CookHouse"
tasks:
- id: dependency_review
name: "Dependency & Supply Chain Review"
description: "Review dependency files for hallucinated packages, typosquatting, and known vulnerabilities"
difficulty: easy
max_steps: 15
- id: iac_review
name: "Infrastructure-as-Code Security Review"
description: "Review Terraform/Kubernetes configurations for security misconfigurations"
difficulty: medium
max_steps: 25
- id: migration_review
name: "Database Migration Safety Review"
description: "Review SQL migration scripts for backward-incompatibility, safety risks, and production impact"
difficulty: hard
max_steps: 35