Workflows

kind: module
name: subdomain-enum
description: Enumerate subdomains for a target

params:
  - name: target
    required: true

steps:
  - name: run-subfinder
    type: bash
    command: subfinder -d {{target}} -o {{Output}}/subdomains.txt

kind: flow
name: full-recon
description: Complete reconnaissance pipeline

params:
  - name: target
    required: true

modules:
  - name: subdomain-enum
    path: modules/subdomain-enum.yaml

  - name: http-probe
    path: modules/http-probe.yaml
    depends_on:
      - subdomain-enum

  - name: screenshot
    path: modules/screenshot.yaml
    depends_on:
      - http-probe

1. Parse workflow YAML
2. Validate structure and required params
3. Create workspace directory
4. Initialize execution context
   - Inject built-in variables (Target, Output, etc.)
   - Merge user parameters
5. For each step:
   a. Evaluate pre_condition (skip if false)
   b. Render templates in step fields
   c. Dispatch to step executor
   d. Process exports
   e. Evaluate decision routing
   f. Handle on_success/on_error actions
6. Return result

1. Parse flow YAML
2. Build dependency graph (DAG)
3. For each module (topologically sorted):
   a. Check if dependencies completed
   b. Evaluate condition (skip if false)
   c. Execute module
   d. Continue to dependent modules
4. Aggregate results

kind: module                    # Required: "module"
name: my-module                 # Required: workflow name
description: What it does       # Optional: description
tags:                          # Optional: categorization
  - reconnaissance
  - subdomain

params:                        # Parameters
  - name: target
    required: true
    description: Target domain
  - name: threads
    default: "10"
    description: Thread count

runner: host                   # Optional: default runner (host|docker|ssh)
runner_config:                 # Optional: runner configuration
  image: alpine:latest

trigger:                       # Optional: scheduling triggers
  - name: daily
    on: cron
    schedule: "0 2 * * *"

steps:                         # Required: list of steps
  - name: step-one
    type: bash
    command: echo "Hello"

kind: flow                     # Required: "flow"
name: my-flow                  # Required: workflow name
description: Pipeline          # Optional: description

params:                        # Flow-level parameters
  - name: target
    required: true

modules:                       # Required: list of module references
  - name: first-module
    path: modules/first.yaml
    params:                    # Override module params
      threads: "20"

  - name: second-module
    path: modules/second.yaml
    depends_on:
      - first-module
    condition: 'fileLength("{{Output}}/data.txt") > 0'

~/osmedeus-base/workspaces/
└── example.com/                    # Target workspace
    ├── workflow.yaml               # Executed workflow (copy)
    ├── subdomain-enum/             # Module output directory
    │   ├── subdomains.txt
    │   └── amass.txt
    ├── http-probe/
    │   └── live-hosts.txt
    └── screenshot/
        └── screenshots/

modules:
  - name: A                    # No dependencies - runs first
    path: modules/a.yaml

  - name: B                    # Depends on A
    path: modules/b.yaml
    depends_on: [A]

  - name: C                    # Depends on A
    path: modules/c.yaml
    depends_on: [A]

  - name: D                    # Depends on B and C
    path: modules/d.yaml
    depends_on: [B, C]

    A
   / \
  B   C
   \ /
    D

- name: nuclei-scan
  type: bash
  pre_condition: 'fileLength("{{Output}}/live-hosts.txt") > 0'
  command: nuclei -l {{Output}}/live-hosts.txt

modules:
  - name: vuln-scan
    path: modules/vuln.yaml
    depends_on: [http-probe]
    condition: 'fileLength("{{Output}}/live-hosts.txt") > 0'