Real CVE training for developers — fix production bugs in your terminal
Project description
GroundWork CLI
Real CVE training for developers — fix production bugs directly in your terminal.
GroundWork is a terminal-based training tool that pulls real-world Common Vulnerabilities and Exposures (CVEs) from open-source projects and drops you into a simulated scenario. Read the Jira-style ticket, review the buggy code, write your fix, and test your security engineering skills against actual production patches.
Features
- Real-World Vulnerabilities: Pulled directly from GitHub Advisories and Google's OSS-Fuzz database.
- Simulated Environment: Every scenario includes a realistic bug ticket, severity rating, and AI-generated contextual hints.
- Instant Validation: Submit your code to instantly verify if your logic matches the historical commit that fixed the CVE.
- Frictionless: No accounts, no logins, no web portals. Just install and run.
Supported Languages
- Python
- JavaScript / Node.js
- Java
- C++
Installation
GroundWork requires macOS or Linux (Windows is not natively supported due to strict Unix tty dependencies) and Python 3.10+.
You can install the CLI directly from PyPI:
pip install groundwork-cli
Usage
Start a new training session by running:
groundwork
Select your target language from the interactive menu. Once a ticket is loaded, use the following interactive commands:
[h]- Request a hint[s]- Submit your fixed code[r]- Reveal the real-world solution and mental model[n]- Start a new session[q]- Quit the application
Configuration
By default, the CLI connects to the official GroundWork production server. If you are hosting your own GroundWork FastAPI backend for local development or an internal corporate network, you can override the target API using an environment variable:
export GROUNDWORK_URL="http://localhost:8000"
groundwork
Local Development
If you want to contribute to the CLI or run it from source:
- Clone the repository:
git clone https://github.com/yourusername/groundwork-cli.git
cd groundwork-cli
- Install the package in editable mode:
pip install -e .
- Run the CLI:
groundwork
License
MIT
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file groundwork_cli-0.1.3.tar.gz.
File metadata
- Download URL: groundwork_cli-0.1.3.tar.gz
- Upload date:
- Size: 5.2 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.12.3
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
ae73a692a91cb567506123195aea87a61615db8eca2c254d41fed97a1443b60e
|
|
| MD5 |
e376b2a0e6e4a7a5a3a40addf703879d
|
|
| BLAKE2b-256 |
e483350235baeb1846f167a8770e32eb2a3a5d11e7b619a1c677a1507ccdd363
|
File details
Details for the file groundwork_cli-0.1.3-py3-none-any.whl.
File metadata
- Download URL: groundwork_cli-0.1.3-py3-none-any.whl
- Upload date:
- Size: 6.0 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.12.3
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
1603fc4732c1f2e6a7bcb463981e16cc359e1bd258378182b501a812279232c0
|
|
| MD5 |
d281fea3efb4b226839a3837feb937e0
|
|
| BLAKE2b-256 |
437be919f85654a68f2d3d0efcb00a42cb9fad96b2ff21f25dbadcdf3ad96a7b
|