wehub-resource-sync
0d3cb498a3
Deploy local.promptfoo.app / Deploy to Cloudflare Pages (push) Waiting to run
Test and Publish Multi-arch Docker Image / test (push) Waiting to run
Test and Publish Multi-arch Docker Image / build-docker-and-push-digests (map[digest-suffix:linux-amd64 platform:linux/amd64 runner:ubuntu-latest]) (push) Blocked by required conditions
Test and Publish Multi-arch Docker Image / build-docker-and-push-digests (map[digest-suffix:linux-arm64 platform:linux/arm64 runner:ubuntu-24.04-arm]) (push) Blocked by required conditions
Test and Publish Multi-arch Docker Image / merge-docker-digests (push) Blocked by required conditions
Test and Publish Multi-arch Docker Image / Attest Multi-arch Image (push) Blocked by required conditions
Validate Renovate Config / Validate Renovate Configuration (push) Waiting to run
CI / Shell Format Check (push) Has been cancelled
CI / Check Ruby (3.4) (push) Has been cancelled
CI / CI Config (push) Has been cancelled
CI / Test on Node ${{ matrix.node }} and ${{ matrix.os }}${{ matrix.shard && format(' (shard {0}/3)', matrix.shard) || '' }} (push) Has been cancelled
CI / Build on Node ${{ matrix.node }} (push) Has been cancelled
CI / Style Check (push) Has been cancelled
CI / Generate Assets (push) Has been cancelled
CI / Check Python (3.14) (push) Has been cancelled
CI / Check Python (3.9) (push) Has been cancelled
CI / Build Docs (push) Has been cancelled
CI / Code Scan Action (push) Has been cancelled
CI / Site tests (push) Has been cancelled
CI / webui tests (push) Has been cancelled
CI / Run Integration Tests (push) Has been cancelled
CI / Run Smoke Tests (push) Has been cancelled
CI / Go Tests (push) Has been cancelled
CI / Share Test (push) Has been cancelled
CI / Redteam (Production API) (push) Has been cancelled
CI / Redteam (Staging API) (push) Has been cancelled
CI / GitHub Actions Lint (push) Has been cancelled
CI / Check Ruby (3.0) (push) Has been cancelled
release-please / release-please (push) Has been cancelled
release-please / build (push) Has been cancelled
release-please / publish-npm (push) Has been cancelled
release-please / publish-npm-backfill (push) Has been cancelled
release-please / docker (push) Has been cancelled
release-please / publish-code-scan-action (push) Has been cancelled
release-please / attest-code-scan-action (push) Has been cancelled
28 lines
792 B
Markdown
28 lines
792 B
Markdown
# compare-agentic-sdks/test-codebase (Test Codebase for Agentic SDK Comparison)
|
|
|
|
This is an intentionally vulnerable codebase designed to test AI coding assistants' ability to:
|
|
|
|
1. **Identify security vulnerabilities**
|
|
2. **Suggest secure alternatives**
|
|
3. **Understand cross-file dependencies**
|
|
4. **Generate production-ready fixes**
|
|
|
|
## Known Issues
|
|
|
|
### user_service.py
|
|
|
|
- MD5 password hashing (insecure)
|
|
- Timing attack vulnerability in authentication
|
|
- Predictable session tokens
|
|
- Returns password hashes in `get_user_data()`
|
|
- Doesn't invalidate sessions on user deletion
|
|
|
|
### payment_processor.py
|
|
|
|
- Float for currency (precision issues)
|
|
- Stores CVV (PCI-DSS violation)
|
|
- Stores full card numbers
|
|
- Logs sensitive data
|
|
- No input validation
|
|
- Float arithmetic for money calculations
|