Skip to main content

Real CVE training for developers — fix production bugs in your terminal

Project description

GroundWork CLI

Real CVE training for developers — fix production bugs directly in your terminal.

GroundWork is a terminal-based training tool that pulls real-world Common Vulnerabilities and Exposures (CVEs) from open-source projects and drops you into a simulated scenario. Read the Jira-style ticket, review the buggy code, write your fix, and test your security engineering skills against actual production patches.

Features

  • Real-World Vulnerabilities: Pulled directly from GitHub Advisories and Google's OSS-Fuzz database.
  • Simulated Environment: Every scenario includes a realistic bug ticket, severity rating, and AI-generated contextual hints.
  • Instant Validation: Submit your code to instantly verify if your logic matches the historical commit that fixed the CVE.
  • Frictionless: No accounts, no logins, no web portals. Just install and run.

Supported Languages

  • Python
  • JavaScript / Node.js
  • Java
  • C++

Installation

GroundWork requires macOS or Linux (Windows is not natively supported due to strict Unix tty dependencies) and Python 3.10+.

You can install the CLI directly from PyPI:

pip install groundwork-cli

Usage

Start a new training session by running:

groundwork

Select your target language from the interactive menu. Once a ticket is loaded, use the following interactive commands:

  • [h] - Request a hint
  • [s] - Submit your fixed code
  • [r] - Reveal the real-world solution and mental model
  • [n] - Start a new session
  • [q] - Quit the application

Configuration

By default, the CLI connects to the official GroundWork production server. If you are hosting your own GroundWork FastAPI backend for local development or an internal corporate network, you can override the target API using an environment variable:

export GROUNDWORK_URL="http://localhost:8000"
groundwork

Local Development

If you want to contribute to the CLI or run it from source:

  1. Clone the repository:
git clone https://github.com/yourusername/groundwork-cli.git
cd groundwork-cli
  1. Install the package in editable mode:
pip install -e .
  1. Run the CLI:
groundwork

License

MIT

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

groundwork_cli-0.1.3.tar.gz (5.2 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

groundwork_cli-0.1.3-py3-none-any.whl (6.0 kB view details)

Uploaded Python 3

File details

Details for the file groundwork_cli-0.1.3.tar.gz.

File metadata

  • Download URL: groundwork_cli-0.1.3.tar.gz
  • Upload date:
  • Size: 5.2 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.3

File hashes

Hashes for groundwork_cli-0.1.3.tar.gz
Algorithm Hash digest
SHA256 ae73a692a91cb567506123195aea87a61615db8eca2c254d41fed97a1443b60e
MD5 e376b2a0e6e4a7a5a3a40addf703879d
BLAKE2b-256 e483350235baeb1846f167a8770e32eb2a3a5d11e7b619a1c677a1507ccdd363

See more details on using hashes here.

File details

Details for the file groundwork_cli-0.1.3-py3-none-any.whl.

File metadata

  • Download URL: groundwork_cli-0.1.3-py3-none-any.whl
  • Upload date:
  • Size: 6.0 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.3

File hashes

Hashes for groundwork_cli-0.1.3-py3-none-any.whl
Algorithm Hash digest
SHA256 1603fc4732c1f2e6a7bcb463981e16cc359e1bd258378182b501a812279232c0
MD5 d281fea3efb4b226839a3837feb937e0
BLAKE2b-256 437be919f85654a68f2d3d0efcb00a42cb9fad96b2ff21f25dbadcdf3ad96a7b

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page