CalvinBackup/fuzzforge_ai
1
0
Fork 0
mirror of https://github.com/FuzzingLabs/fuzzforge_ai.git synced 2026-02-13 18:32:46 +00:00
Code Issues Packages Projects Releases Wiki Activity
39 Commits 18 Branches 2 Tags
feature/cognee-service
Commit Graph

39 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Songbird
5229a7d413 Store ProjectConfigManager on executor 2025-10-03 23:08:18 +02:00
Songbird
ea909cd283 Swap knowledge listing to MCP dataset lookup 2025-10-03 22:44:32 +02:00
Songbird
eef62c3650 Fix agent initialization order for memory manager 2025-10-03 22:23:42 +02:00
Songbird
9649e5e87f Expose Cognee MCP tools to ADK agent 2025-10-03 22:17:44 +02:00
Songbird
468d484054 Wire FuzzForge agent to Cognee MCP tools 2025-10-03 22:12:38 +02:00
Songbird
1bb0ec4764 Extend Cognee MCP mirror with search and memify 2025-10-03 20:41:46 +02:00
Songbird
c7adfabe0a Integrate Cognee service updates 2025-10-03 12:10:33 +02:00
Tanguy Duhamel
43d3eae1db fix: Filter metadata-only parameters from workflow arguments 
SecurityAssessmentWorkflow was receiving 7 arguments instead of 2-5.
The issue was that target_path and volume_mode from default_parameters
were being passed to the workflow, when they should only be used by
the system for configuration.

Now filters out metadata-only parameters (target_path, volume_mode)
before passing arguments to workflow execution.
 2025-10-02 11:49:14 +02:00
Tanguy Duhamel
3d45b99ee8 fix: Use positional args instead of kwargs for Temporal workflows 
The Temporal Python SDK's start_workflow() method doesn't accept
a 'kwargs' parameter. Workflows must receive parameters as positional
arguments via the 'args' parameter.

Changed from:
  args=workflow_args  # Positional arguments

This fixes the error:
  TypeError: Client.start_workflow() got an unexpected keyword argument 'kwargs'

Workflows now correctly receive parameters in order:
- security_assessment: [target_id, scanner_config, analyzer_config, reporter_config]
- atheris_fuzzing: [target_id, target_file, max_iterations, timeout_seconds]
- rust_test: [target_id, test_message]
 2025-10-02 11:41:02 +02:00
Tanguy Duhamel
8e0e167ddd chore: Complete Temporal migration with updated CLI/SDK/docs 
This commit includes all remaining Temporal migration changes:

## CLI Updates (cli/)
- Updated workflow execution commands for Temporal
- Enhanced error handling and exceptions
- Updated dependencies in uv.lock

## SDK Updates (sdk/)
- Client methods updated for Temporal workflows
- Updated models for new workflow execution
- Updated dependencies in uv.lock

## Documentation Updates (docs/)
- Architecture documentation for Temporal
- Workflow concept documentation
- Resource management documentation (new)
- Debugging guide (new)
- Updated tutorials and how-to guides
- Troubleshooting updates

## README Updates
- Main README with Temporal instructions
- Backend README
- CLI README
- SDK README

## Other
- Updated IMPLEMENTATION_STATUS.md
- Removed old vulnerable_app.tar.gz

These changes complete the Temporal migration and ensure the
CLI/SDK work correctly with the new backend.
 2025-10-02 11:26:32 +02:00
Tanguy Duhamel
fe50d4ef72 feat: Add Python fuzzing vertical with Atheris integration 
This commit implements a complete Python fuzzing workflow using Atheris:

## Python Worker (workers/python/)
- Dockerfile with Python 3.11, Atheris, and build tools
- Generic worker.py for dynamic workflow discovery
- requirements.txt with temporalio, boto3, atheris dependencies
- Added to docker-compose.temporal.yaml with dedicated cache volume

## AtherisFuzzer Module (backend/toolbox/modules/fuzzer/)
- Reusable module extending BaseModule
- Auto-discovers fuzz targets (fuzz_*.py, *_fuzz.py, fuzz_target.py)
- Recursive search to find targets in nested directories
- Dynamically loads TestOneInput() function
- Configurable max_iterations and timeout
- Real-time stats callback support for live monitoring
- Returns findings as ModuleFinding objects

## Atheris Fuzzing Workflow (backend/toolbox/workflows/atheris_fuzzing/)
- Temporal workflow for orchestrating fuzzing
- Downloads user code from MinIO
- Executes AtherisFuzzer module
- Uploads results to MinIO
- Cleans up cache after execution
- metadata.yaml with vertical: python for routing

## Test Project (test_projects/python_fuzz_waterfall/)
- Demonstrates stateful waterfall vulnerability
- main.py with check_secret() that leaks progress
- fuzz_target.py with Atheris TestOneInput() harness
- Complete README with usage instructions

## Backend Fixes
- Fixed parameter merging in REST API endpoints (workflows.py)
- Changed workflow parameter passing from positional args to kwargs (manager.py)
- Default parameters now properly merged with user parameters

## Testing
✅ Worker discovered AtherisFuzzingWorkflow
✅ Workflow executed end-to-end successfully
✅ Fuzz target auto-discovered in nested directories
✅ Atheris ran 100,000 iterations
✅ Results uploaded and cache cleaned
 2025-10-02 11:06:34 +02:00
Tanguy Duhamel
0680f14df6 feat: Complete migration from Prefect to Temporal 
BREAKING CHANGE: Replaces Prefect workflow orchestration with Temporal

## Major Changes
- Replace Prefect with Temporal for workflow orchestration
- Implement vertical worker architecture (rust, android)
- Replace Docker registry with MinIO for unified storage
- Refactor activities to be co-located with workflows
- Update all API endpoints for Temporal compatibility

## Infrastructure
- New: docker-compose.temporal.yaml (Temporal + MinIO + workers)
- New: workers/ directory with rust and android vertical workers
- New: backend/src/temporal/ (manager, discovery)
- New: backend/src/storage/ (S3-cached storage with MinIO)
- New: backend/toolbox/common/ (shared storage activities)
- Deleted: docker-compose.yaml (old Prefect setup)
- Deleted: backend/src/core/prefect_manager.py
- Deleted: backend/src/services/prefect_stats_monitor.py
- Deleted: Docker registry and insecure-registries requirement

## Workflows
- Migrated: security_assessment workflow to Temporal
- New: rust_test workflow (example/test workflow)
- Deleted: secret_detection_scan (Prefect-based, to be reimplemented)
- Activities now co-located with workflows for independent testing

## API Changes
- Updated: backend/src/api/workflows.py (Temporal submission)
- Updated: backend/src/api/runs.py (Temporal status/results)
- Updated: backend/src/main.py (727 lines, TemporalManager integration)
- Updated: All 16 MCP tools to use TemporalManager

## Testing
- ✅ All services healthy (Temporal, PostgreSQL, MinIO, workers, backend)
- ✅ All API endpoints functional
- ✅ End-to-end workflow test passed (72 findings from vulnerable_app)
- ✅ MinIO storage integration working (target upload/download, results)
- ✅ Worker activity discovery working (6 activities registered)
- ✅ Tarball extraction working
- ✅ SARIF report generation working

## Documentation
- ARCHITECTURE.md: Complete Temporal architecture documentation
- QUICKSTART_TEMPORAL.md: Getting started guide
- MIGRATION_DECISION.md: Why we chose Temporal over Prefect
- IMPLEMENTATION_STATUS.md: Migration progress tracking
- workers/README.md: Worker development guide

## Dependencies
- Added: temporalio>=1.6.0
- Added: boto3>=1.34.0 (MinIO S3 client)
- Removed: prefect>=3.4.18
 2025-10-01 15:11:24 +02:00
Tanguy Duhamel
987c49569c Merge branch 'master' of github.com:FuzzingLabs/fuzzforge_ai 2025-10-01 10:16:43 +02:00
Tanguy Duhamel
dd0a80252d Update readme with insecure registries 2025-10-01 10:16:33 +02:00
Patrick Ventuzelo
a25c5e191c Merge pull request #7 from MegaRedHand/fix/wrong-repo-in-readme 
docs(readme): fix repo name in `git clone` command
 2025-10-01 00:25:51 +02:00
Tomás Grüner
ad4c837866 docs(readme): fix repo name in git clone command 2025-09-30 19:04:59 -03:00
abel
5dd470f6e0 fix: update documentation links to new domain 2025-09-30 16:06:09 +02:00
Tanguy Duhamel
b1e13ec5d1 Add missing modules and workflow 2025-09-30 15:36:23 +02:00
Tanguy Duhamel
7382ea6e20 Merge branch 'master' of github.com:FuzzingLabs/fuzzforge_ai 2025-09-30 15:19:16 +02:00
Tanguy Duhamel
6c1cbf92bb Fix deployment issues 2025-09-30 15:18:53 +02:00
abel
cdb53c6967 ci: change trigger branch from 'main' to 'master' 2025-09-30 14:27:58 +02:00
abel
c36b1e9559 ci: change deployment branch from 'main' to 'master' 2025-09-30 14:27:41 +02:00
abel
0a91d32451 fix: update path for upload build artifact 2025-09-30 14:17:53 +02:00
abel
4e889d52aa ci: add workflow_dispatch to action 2025-09-30 14:11:38 +02:00
Patrick Ventuzelo
f3c9964856 Update README.md 
add roadmap link
 2025-09-30 13:55:20 +02:00
Patrick Ventuzelo
ec11c11f0e Update README.md 
remove logo website
 2025-09-30 13:52:24 +02:00
tduhamel42
1dde5f54b7 Update README.md 2025-09-30 13:51:23 +02:00
Patrick Ventuzelo
d00ac7574c Update README.md 
fix github star button
 2025-09-30 13:50:05 +02:00
tduhamel42
4ea38570fd Update README.md 2025-09-30 13:45:47 +02:00
Patrick Ventuzelo
4b5326395e Update README.md 2025-09-30 13:39:33 +02:00
Patrick Ventuzelo
44dfafd8c3 Update README.md 
add new banner github
 2025-09-30 13:38:23 +02:00
Patrick Ventuzelo
4c275d3fa0 add banner github 
add banner github
 2025-09-30 13:37:59 +02:00
Tanguy Duhamel
fb9ed420be Fix parameters bug + installation issues 2025-09-30 12:10:47 +02:00
tduhamel42
3eacfcb06e Merge pull request #1 from FuzzingLabs/pventuzelo-patch-1 
Update README.md
 2025-09-30 09:36:40 +02:00
tduhamel42
f46565438c Update README.md 2025-09-30 09:36:23 +02:00
Patrick Ventuzelo
a4d204db27 Update README.md 2025-09-29 23:25:25 +02:00
Tanguy Duhamel
bb80c73106 Issue templates 2025-09-29 21:33:32 +02:00
Tanguy Duhamel
323a434c73 Initial commit 2025-09-29 21:26:41 +02:00
tduhamel42
f0fd367ed8 Add files via upload 2025-09-29 15:12:47 +02:00