Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
46 commits
Select commit Hold shift + click to select a range
cdf9dd5
rpm analyzier mile stone one
RedTanny Apr 15, 2026
34a0b14
start prompt the identify keywords
RedTanny Apr 19, 2026
7024b9b
Identiy sub graph flow
RedTanny Apr 19, 2026
95543f0
chunk and parse code file and index it to the lexical search
RedTanny Apr 20, 2026
d8ae498
milestone 1 locate vulnerability place
RedTanny Apr 20, 2026
c31255b
locate mile stone 2
RedTanny Apr 23, 2026
8f26f2a
verify step 1
RedTanny Apr 23, 2026
436d75f
clear labels
RedTanny Apr 25, 2026
50638ee
last changes
RedTanny Apr 27, 2026
8953458
generating report for L1 agent
RedTanny Apr 28, 2026
49bdfdd
fix L1 report
RedTanny Apr 28, 2026
70bd805
update prompt
RedTanny Apr 28, 2026
ceea155
Save changes before change in design
RedTanny Apr 30, 2026
66e64a3
redesign: preprocess node
RedTanny Apr 30, 2026
db9e0fd
save work
RedTanny May 1, 2026
b85aa87
first React agent loop work
RedTanny May 2, 2026
d18da88
improve report for downstream L1
RedTanny May 2, 2026
f38d5c8
before report change
RedTanny May 3, 2026
96cf96e
fix report
RedTanny May 3, 2026
18e4667
cleanup and fix bug
RedTanny May 3, 2026
2703240
add observation logic
RedTanny May 4, 2026
e07ab79
observation node part2
RedTanny May 4, 2026
0070e57
Integration L2 with flow
RedTanny May 4, 2026
c5b1149
skeleton L2 agent
RedTanny May 5, 2026
74cdaa4
save cwe-id and add hardening db file
RedTanny May 5, 2026
16b3146
Imp preprocess data
RedTanny May 5, 2026
f04a0d8
force node to code agent
RedTanny May 5, 2026
aea087a
L2 Agent build ,before loop
RedTanny May 5, 2026
1b16ad7
not working yet
RedTanny May 6, 2026
d7794df
E2E - with bugs
RedTanny May 6, 2026
cb3ff4b
new api schema for rpm checker
RedTanny May 7, 2026
8e7310a
save before big change
RedTanny May 7, 2026
a2b7bd8
add vulnerability intel
RedTanny May 7, 2026
d62dff6
L2 build agent improvments
RedTanny May 9, 2026
38f88fd
filter binary file
RedTanny May 10, 2026
f1d1fac
fix status of report
RedTanny May 10, 2026
45b9ef8
check for package name in cve matches package target
RedTanny May 10, 2026
ecff816
add Intel calculation of score and reports
RedTanny May 10, 2026
d7c77a3
clear summary report
RedTanny May 10, 2026
a9fa52e
clean report summary executive
RedTanny May 11, 2026
cac3af5
update report structure
RedTanny May 11, 2026
4fa7f93
report use case upstream find patch to use
RedTanny May 11, 2026
7234275
update rebase to fetch patch from github
RedTanny May 12, 2026
9c5f781
missing file
RedTanny May 13, 2026
4d0892b
send failure to failed node and add url to report
RedTanny May 13, 2026
28a3fe4
grep tool support multi pattern query and fix osv retrive
RedTanny May 13, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,7 @@ RUN apt-get update && apt-get install -y \
libarchive-tools \
xz-utils \
libatomic1 \
libkrb5-dev \
&& apt-get clean \
&& rm -rf /var/lib/apt/lists/* \
&& update-ca-certificates
Expand Down
2 changes: 2 additions & 0 deletions pyproject.toml
Original file line number Diff line number Diff line change
Expand Up @@ -35,6 +35,8 @@ dependencies = [
"litellm<=1.75.8",
"csaf-tool==0.3.2",
"jsonschema>=4.0.0,<5.0.0",
"koji",
"unidiff>=0.7.5",
]
requires-python = ">=3.11,<3.13"
description = "NVIDIA AI Blueprint: Vulnerability Analysis for Container Security"
Expand Down
14 changes: 14 additions & 0 deletions src/exploit_iq_commons/data/hardening_kb/__init__.py
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
# SPDX-FileCopyrightText: Copyright (c) 2025, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
# SPDX-License-Identifier: Apache-2.0
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
Loading