Skip to main content

Real CVE training for developers — fix production bugs in your terminal

Project description

GroundWork CLI

Real CVE training for developers — fix production bugs directly in your terminal.

GroundWork is a terminal-based training tool that pulls real-world Common Vulnerabilities and Exposures (CVEs) from open-source projects and drops you into a simulated scenario. Read the Jira-style ticket, review the buggy code, write your fix, and test your security engineering skills against actual production patches.

Features

  • Real-World Vulnerabilities: Pulled directly from GitHub Advisories and Google's OSS-Fuzz database.
  • Simulated Environment: Every scenario includes a realistic bug ticket, severity rating, and AI-generated contextual hints.
  • Instant Validation: Submit your code to instantly verify if your logic matches the historical commit that fixed the CVE.
  • Frictionless: No accounts, no logins, no web portals. Just install and run.

Supported Languages

  • Python
  • JavaScript / Node.js
  • Java
  • C++

Installation

GroundWork requires macOS or Linux (Windows is not natively supported due to strict Unix tty dependencies) and Python 3.10+.

You can install the CLI directly from PyPI:

pip install groundwork-cli

Usage

Start a new training session by running:

groundwork

Select your target language from the interactive menu. Once a ticket is loaded, use the following interactive commands:

  • [h] - Request a hint
  • [s] - Submit your fixed code
  • [r] - Reveal the real-world solution and mental model
  • [n] - Start a new session
  • [q] - Quit the application

Configuration

By default, the CLI connects to the official GroundWork production server. If you are hosting your own GroundWork FastAPI backend for local development or an internal corporate network, you can override the target API using an environment variable:

export GROUNDWORK_URL="http://localhost:8000"
groundwork

Local Development

If you want to contribute to the CLI or run it from source:

  1. Clone the repository:
git clone https://github.com/yourusername/groundwork-cli.git
cd groundwork-cli
  1. Install the package in editable mode:
pip install -e .
  1. Run the CLI:
groundwork

License

MIT

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

groundwork_cli-0.1.1.tar.gz (5.0 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

groundwork_cli-0.1.1-py3-none-any.whl (5.8 kB view details)

Uploaded Python 3

File details

Details for the file groundwork_cli-0.1.1.tar.gz.

File metadata

  • Download URL: groundwork_cli-0.1.1.tar.gz
  • Upload date:
  • Size: 5.0 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.3

File hashes

Hashes for groundwork_cli-0.1.1.tar.gz
Algorithm Hash digest
SHA256 cbc81c110a1ee2be15ac3ad1aec8d19701dece1dd4b294090de3d9ee1e82fa5b
MD5 55f2262a30bc04f918ec81b2fb56c585
BLAKE2b-256 498f213f3a040742337a4969906fbc50fc5008025aa79b69843785da6bd81647

See more details on using hashes here.

File details

Details for the file groundwork_cli-0.1.1-py3-none-any.whl.

File metadata

  • Download URL: groundwork_cli-0.1.1-py3-none-any.whl
  • Upload date:
  • Size: 5.8 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.3

File hashes

Hashes for groundwork_cli-0.1.1-py3-none-any.whl
Algorithm Hash digest
SHA256 aeedb363452591661b1130c5b9d82f47eb9cbaf74c85ca1c86faeb37f29a78aa
MD5 3ccd5ef7bbcd530a00e785da70de7c2d
BLAKE2b-256 74b69f6895ffce571aca05860f86bd038a9f871837ce4596e0c6572f79cefb37

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page