Skip to main content

Real CVE training for developers — fix production bugs in your terminal

Project description

GroundWork CLI

Real CVE training for developers — fix production bugs directly in your terminal.

GroundWork is a terminal-based training tool that pulls real-world Common Vulnerabilities and Exposures (CVEs) from open-source projects and drops you into a simulated scenario. Read the Jira-style ticket, review the buggy code, write your fix, and test your security engineering skills against actual production patches.

Features

  • Real-World Vulnerabilities: Pulled directly from GitHub Advisories and Google's OSS-Fuzz database.
  • Simulated Environment: Every scenario includes a realistic bug ticket, severity rating, and AI-generated contextual hints.
  • Instant Validation: Submit your code to instantly verify if your logic matches the historical commit that fixed the CVE.
  • Frictionless: No accounts, no logins, no web portals. Just install and run.

Supported Languages

  • Python
  • JavaScript / Node.js
  • Java
  • C++

Installation

GroundWork requires macOS or Linux (Windows is not natively supported due to strict Unix tty dependencies) and Python 3.10+.

You can install the CLI directly from PyPI:

pip install groundwork-cli

Usage

Start a new training session by running:

groundwork

Select your target language from the interactive menu. Once a ticket is loaded, use the following interactive commands:

  • [h] - Request a hint
  • [s] - Submit your fixed code
  • [r] - Reveal the real-world solution and mental model
  • [n] - Start a new session
  • [q] - Quit the application

Configuration

By default, the CLI connects to the official GroundWork production server. If you are hosting your own GroundWork FastAPI backend for local development or an internal corporate network, you can override the target API using an environment variable:

export GROUNDWORK_URL="http://localhost:8000"
groundwork

Local Development

If you want to contribute to the CLI or run it from source:

  1. Clone the repository:
git clone https://github.com/yourusername/groundwork-cli.git
cd groundwork-cli
  1. Install the package in editable mode:
pip install -e .
  1. Run the CLI:
groundwork

License

MIT

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

groundwork_cli-0.1.0.tar.gz (5.1 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

groundwork_cli-0.1.0-py3-none-any.whl (5.9 kB view details)

Uploaded Python 3

File details

Details for the file groundwork_cli-0.1.0.tar.gz.

File metadata

  • Download URL: groundwork_cli-0.1.0.tar.gz
  • Upload date:
  • Size: 5.1 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.3

File hashes

Hashes for groundwork_cli-0.1.0.tar.gz
Algorithm Hash digest
SHA256 ada426deb62d9ef01e7e576931aa639706c2ce203e6f36b71da51e44d0e1f168
MD5 db157cb8fc903ffbf0381abda8fc296b
BLAKE2b-256 ee1a64fa7c1aafbed333c8ef9eb47a3e2f50b9699972b97752c2bf9b3e2e5e09

See more details on using hashes here.

File details

Details for the file groundwork_cli-0.1.0-py3-none-any.whl.

File metadata

  • Download URL: groundwork_cli-0.1.0-py3-none-any.whl
  • Upload date:
  • Size: 5.9 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.3

File hashes

Hashes for groundwork_cli-0.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 7ccea0c28279dc74dde8d98832cd388837c2f856aea013ce66bb105adc7bb2af
MD5 cc82c0340d5bc57e97c60cc315bcd7a7
BLAKE2b-256 eb5f750b0a14f43e775020d0a4f5528f490902548ce46af307f98ede90e4121b

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page