aikido-zen 1.0.2.beta.2-arm64-linux → 1.0.2.beta.5-arm64-linux

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '0784defa0ccb14e2a3be96c4b990c78b731e6cfc47d6a0dd26db2ed2dd1db1c9'
-  data.tar.gz: 50810d3cb365fe3b62763b67b4d6be397cb049ff596d0b6dd049029fb0e28eb9
+  metadata.gz: 80921a006b569e30b996594d7c5e6a8091f0f187a100e9aaaa06733a09070ddf
+  data.tar.gz: 7d11d03f0b471e6b78018d2c09b6d93dee1f00faac856c8faeecf8d940f66323
 SHA512:
-  metadata.gz: 7db7237db244f41e12dfc74d3b823bf62504d353bc29eb7371d4a13af7cc04e43eb6b3432ccd9e79a64e7661e8666cbb7880f2fe5703bf8a590895ce7f897e47
-  data.tar.gz: 0fe70866deff5dc859477d37a2634944f38adb9ca61fc441e31ac0d200227d839298b4ed75e2ca8df36612d57b5d909e8123d4f541309d821023a88af1ed3457
+  metadata.gz: 6f8f723397d0ddf190604a15ba945f4304bcebd4a6448ac4bedad4445b2bb1920af79e5ed5d500ad72e5f323627b2253616f89ee7b0fb3633646427d7e94a752
+  data.tar.gz: 17edce172139dc52e2d9f1a5486912044a92d168c83a603a32619a610a8b8f00962c2eae1de54b97c7358b9dfaab911a55079a76b55e1eaddc27dbbfa208f281

data/lib/aikido/zen/attack.rb

@@ -67,7 +67,9 @@ module Aikido::Zen
       end
 
       def metadata
-        {filename: filepath}
+        {
+          filename: filepath
+        }
       end
 
       def humanized_name
@@ -133,7 +135,10 @@ module Aikido::Zen
       end
 
       def metadata
-        {sql: @query}
+        {
+          sql: @query,
+          dialect: @dialect
+        }
       end
 
       def exception(*)
@@ -165,7 +170,7 @@ module Aikido::Zen
 
       def metadata
         {
-          host: @request.uri.hostname,
+          hostname: @request.uri.hostname,
           port: @request.uri.port
         }
       end
@@ -200,7 +205,10 @@ module Aikido::Zen
       end
 
       def metadata
-        {}
+        {
+          hostname: @hostname,
+          resolvedIP: @address
+        }
       end
     end
   end

data/lib/aikido/zen/config.rb

@@ -70,6 +70,9 @@ module Aikido::Zen
     attr_accessor :debugging
     alias_method :debugging?, :debugging
 
+    # @return [String] environment specific HTTP header providing the client IP.
+    attr_accessor :client_ip_header
+
     # @return [Integer] maximum number of timing measurements to keep in memory
     #   before compressing them.
     attr_accessor :max_performance_samples
@@ -146,13 +149,16 @@ module Aikido::Zen
     #   the server returns a 429 response.
     attr_accessor :server_rate_limit_deadline
 
+    # @return [Boolean] whether Aikido Zen should scan for stored SSSRF attacks.
+    #   Defaults to true. Can be set through AIKIDO_FEATURE_STORED_SSRF
+    #   environment variable.
+    attr_accessor :stored_ssrf
+    alias_method :stored_ssrf?, :stored_ssrf
+
     # @return [Array<String>] when checking for stored SSRF attacks, we want to
     #   allow known hosts that should be able to resolve to the IMDS service.
     attr_accessor :imds_allowed_hosts
 
-    # @return [String] environment specific HTTP header providing the client IP.
-    attr_accessor :client_ip_header
-
     def initialize
       self.disabled = read_boolean_from_env(ENV.fetch("AIKIDO_DISABLED", false))
       self.blocking_mode = read_boolean_from_env(ENV.fetch("AIKIDO_BLOCK", false))
@@ -183,6 +189,7 @@ module Aikido::Zen
       self.api_schema_max_samples = Integer(ENV.fetch("AIKIDO_MAX_API_DISCOVERY_SAMPLES", 10))
       self.api_schema_collection_max_depth = 20
       self.api_schema_collection_max_properties = 20
+      self.stored_ssrf = read_boolean_from_env(ENV.fetch("AIKIDO_FEATURE_STORED_SSRF", true))
       self.imds_allowed_hosts = ["metadata.google.internal", "metadata.goog"]
     end
 

data/lib/aikido/zen/scanners/stored_ssrf_scanner.rb

@@ -33,7 +33,9 @@ module Aikido::Zen
       # @return [String, nil] either the offending address, or +nil+ if no
       #   address is deemed dangerous.
       def attack?
-        return false if @config.imds_allowed_hosts.include?(@hostname)
+        return unless @config.stored_ssrf? # Feature flag
+
+        return if @config.imds_allowed_hosts.include?(@hostname)
 
         @addresses.find do |candidate|
           DANGEROUS_ADDRESSES.any? { |address| address === candidate }

data/lib/aikido/zen/version.rb

@@ -2,7 +2,7 @@
 
 module Aikido
   module Zen
-    VERSION = "1.0.2.beta.2"
+    VERSION = "1.0.2.beta.5"
 
     # The version of libzen_internals that we build against.
     LIBZEN_VERSION = "0.1.39"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aikido-zen
 version: !ruby/object:Gem::Version
-  version: 1.0.2.beta.2
+  version: 1.0.2.beta.5
 platform: arm64-linux
 authors:
 - Aikido Security
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-09-05 00:00:00.000000000 Z
+date: 2025-09-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: concurrent-ruby