Skip to main content

Real CVE training for developers — fix production bugs in your terminal

Project description

GroundWork CLI

Real CVE training for developers — fix production bugs directly in your terminal.

GroundWork is a terminal-based training tool that pulls real-world Common Vulnerabilities and Exposures (CVEs) from open-source projects and drops you into a simulated scenario. Read the Jira-style ticket, review the buggy code, write your fix, and test your security engineering skills against actual production patches.

Features

  • Real-World Vulnerabilities: Pulled directly from GitHub Advisories and Google's OSS-Fuzz database.
  • Simulated Environment: Every scenario includes a realistic bug ticket, severity rating, and AI-generated contextual hints.
  • Instant Validation: Submit your code to instantly verify if your logic matches the historical commit that fixed the CVE.
  • Frictionless: No accounts, no logins, no web portals. Just install and run.

Supported Languages

  • Python
  • JavaScript / Node.js
  • Java
  • C++

Installation

GroundWork requires macOS or Linux (Windows is not natively supported due to strict Unix tty dependencies) and Python 3.10+.

You can install the CLI directly from PyPI:

pip install groundwork-cli

Usage

Start a new training session by running:

groundwork

Select your target language from the interactive menu. Once a ticket is loaded, use the following interactive commands:

  • [h] - Request a hint
  • [s] - Submit your fixed code
  • [r] - Reveal the real-world solution and mental model
  • [n] - Start a new session
  • [q] - Quit the application

Configuration

By default, the CLI connects to the official GroundWork production server. If you are hosting your own GroundWork FastAPI backend for local development or an internal corporate network, you can override the target API using an environment variable:

export GROUNDWORK_URL="http://localhost:8000"
groundwork

Local Development

If you want to contribute to the CLI or run it from source:

  1. Clone the repository:
git clone https://github.com/yourusername/groundwork-cli.git
cd groundwork-cli
  1. Install the package in editable mode:
pip install -e .
  1. Run the CLI:
groundwork

License

MIT

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

groundwork_cli-0.1.2.tar.gz (5.1 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

groundwork_cli-0.1.2-py3-none-any.whl (5.9 kB view details)

Uploaded Python 3

File details

Details for the file groundwork_cli-0.1.2.tar.gz.

File metadata

  • Download URL: groundwork_cli-0.1.2.tar.gz
  • Upload date:
  • Size: 5.1 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.3

File hashes

Hashes for groundwork_cli-0.1.2.tar.gz
Algorithm Hash digest
SHA256 4a1015a0f81ebce29e3105f25ec7534b1e40665043a33e40b68801bf93a60082
MD5 d60d93acafd0e6ec95ec460abffd1366
BLAKE2b-256 2aa8b114d0e7a6c916dd2b553dc73a09dd1a212747986868eb7a374824eeed99

See more details on using hashes here.

File details

Details for the file groundwork_cli-0.1.2-py3-none-any.whl.

File metadata

  • Download URL: groundwork_cli-0.1.2-py3-none-any.whl
  • Upload date:
  • Size: 5.9 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.3

File hashes

Hashes for groundwork_cli-0.1.2-py3-none-any.whl
Algorithm Hash digest
SHA256 36426791d14f8f0b7c80f9a4ddabb9983abd03934002bab14c321e78578c1c28
MD5 cc1f1dc1ce78c11c24eea7ab69d65bad
BLAKE2b-256 55e752e8b3470362ada22a3819ad8038fe34d70d45435483d8793357a1ad7788

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page