Skip to main content

Example taskflows to use with the the GitHub Security Lab Taskflow Agent Framework (https://github.com/GitHubSecurityLab/seclab-taskflow-agent)

Project description

SecLab taskflows

This repository contains example taskflows to use with the SecLab Taskflow Agent, as well as the custom MCP servers that are needed to run the taskflows. To run these taskflows, first create a directory named data in src. Various environment variables need to be set for the custom MCP servers to store data.

MEMCACHE_STATE_DIR=/app/data
CODEQL_DBS_BASE_PATH=/app/data
DATA_DIR=/app/data
LOG_DIR=/app/logs

The MEMCACHE_STATE_DIR is needed to persist some intermediate data in the memcache, DATA_DIR is needed for various mcp servers to store intermediate results, and LOG_DIR is used to store log files generated by the servers. These can be set in a .env file in the src directory.

The repo provides a script run_seclab_agent.sh to run a docker container of the seclab-taskflow-agent as outlined here. Note that this script needs to be run from the src directory.

Individual taskflows may need additional setup, please refer to the README.md in the relevant subdirectories for further requirements.

Background

SecLab Taskflows is a companion repository to the SecLab Taskflow Agent repository. SecLab Taskflow Agent is an experimental agentic framework maintained by GitHub Security Lab. This repository provides example taskflows and supporting resources for use with the SecLab Taskflow Agent. We are using the agent and these taskflows to experiment with using AI Agents for security purposes, such as auditing code for vulnerabilities or triaging issues.

We'd love to hear your feedback. Please create an issue to send us a feature request or bug report. We also welcome pull requests (see our contribution guidelines for more information if you wish to contribute).

Requirements

Python >= 3.9 or Docker

License

This project is licensed under the terms of the MIT license. Please refer to the LICENSE file for the full terms.

Maintainers

CODEOWNERS

Support

SUPPORT

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

seclab_taskflows-0.0.3.tar.gz (63.8 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

seclab_taskflows-0.0.3-py3-none-any.whl (108.4 kB view details)

Uploaded Python 3

File details

Details for the file seclab_taskflows-0.0.3.tar.gz.

File metadata

  • Download URL: seclab_taskflows-0.0.3.tar.gz
  • Upload date:
  • Size: 63.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for seclab_taskflows-0.0.3.tar.gz
Algorithm Hash digest
SHA256 e063b1124e6c6a53c443e97ba655e8cc62269f8470ef6254e2daad5b63509b52
MD5 8d4c0368520963fe55f134da4e08e29e
BLAKE2b-256 efd6fb05a0c4e17b0d8df2ef5f705e11600e8b95f2f9b551850544df28101144

See more details on using hashes here.

Provenance

The following attestation bundles were made for seclab_taskflows-0.0.3.tar.gz:

Publisher: publish-to-pypi.yaml on GitHubSecurityLab/seclab-taskflows

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file seclab_taskflows-0.0.3-py3-none-any.whl.

File metadata

File hashes

Hashes for seclab_taskflows-0.0.3-py3-none-any.whl
Algorithm Hash digest
SHA256 ee00fb9dcd6e7b2cf35b094f4560f93c1006506ecaba655af99de2d04b126fa3
MD5 a3e080153da30fcd82acce64d58c8eaa
BLAKE2b-256 23c28fdf1e5e6d43be5dcc0491f1ad94d22fbcb0a6798b299d300fc5cacf3e19

See more details on using hashes here.

Provenance

The following attestation bundles were made for seclab_taskflows-0.0.3-py3-none-any.whl:

Publisher: publish-to-pypi.yaml on GitHubSecurityLab/seclab-taskflows

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page