admin/trailofbits-buttercup
1
0
Fork 0
mirror of https://github.com/trailofbits/buttercup synced 2026-06-21 14:11:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • f25469e84b build(deps): bump the uv group across 7 directories with 4 updates dependabot/uv/common/uv-0a763079a0 dependabot[bot] 2026-06-19 23:49:26 +00:00
  • 5b52c8cfd9 build(deps): bump the uv group across 7 directories with 1 update (#556) main dependabot[bot] 2026-06-17 14:02:50 +02:00
  • adf5530b41 feat(llm): add newer Anthropic + OpenAI models (opus 4.6/4.7, sonnet 4.6, haiku 4.5, gpt-5.4/5.4-mini/5.5) (#544) Riccardo Schirone 2026-06-16 10:25:40 +02:00
  • 2ddae66040 build(deps): bump the actions group across 1 directory with 7 updates (#560) dependabot[bot] 2026-06-15 09:29:43 +02:00
  • 9ed320ba15 feat(scripts): generic oss-fuzz task script + compose skills worktree-generic-oss-fuzz-task-script Riccardo Schirone 2026-05-25 15:01:20 +00:00
  • 8b441757ca build(deps): bump codecov/codecov-action in the actions group (#557) dependabot[bot] 2026-05-25 09:30:38 +02:00
  • 73bb479abe build(deps): bump the uv group across 7 directories with 1 update (#555) dependabot[bot] 2026-05-20 09:39:21 +02:00
  • c1856c4ae3 fix(scripts): e2e.sh approval wait-loop + viable budget/duration defaults e2e-commands Riccardo Schirone 2026-05-19 11:10:48 +00:00
  • dc77e02809 fix(scripts): match real summary log markers for POV/bundle milestones Riccardo Schirone 2026-05-19 08:54:58 +00:00
  • 4ec48c3532 fix(scripts): don't clobber LANGFUSE_* with empty values in e2e.sh Riccardo Schirone 2026-05-19 08:11:54 +00:00
  • acf39c237a refactor(scripts): drop user-facing BUTTERCUP_LITELLM_KEY from e2e.sh Riccardo Schirone 2026-05-19 08:02:45 +00:00
  • f397631780 refactor(scripts): simplify e2e.sh to budget/duration/tag/no-pull Riccardo Schirone 2026-05-19 07:29:17 +00:00
  • ba140d902c fix(scripts): make e2e.sh wait_for robust to pipefail+SIGPIPE Riccardo Schirone 2026-05-18 10:29:15 +00:00
  • 7616b37953 fix(scripts): use explicit if-then-else in e2e.sh to satisfy shellcheck Riccardo Schirone 2026-05-15 14:45:42 +00:00
  • a25a525ad4 fix(scripts): preserve existing .env values in e2e.sh Riccardo Schirone 2026-05-15 12:31:40 +00:00
  • f1ae7073e8 feat(scripts): run e2e via prebuilt GHCR images instead of local build Riccardo Schirone 2026-05-15 09:40:06 +00:00
  • 04b1e8b355 feat(scripts): add docker-only e2e command for example-libpng Riccardo Schirone 2026-05-14 16:31:48 +02:00
  • 2009c772b0 fix(docker-compose): point patcher task storage at tasks_storage (#551) Riccardo Schirone 2026-05-19 09:22:40 +02:00
  • f3e9934f1d docs(skills): add Langfuse agent skills (#545) Riccardo Schirone 2026-05-19 09:21:29 +02:00
  • 761dc6c13f Add compose.prebuilt.yaml overlay for prebuilt GHCR images (#548) Riccardo Schirone 2026-05-18 16:15:53 +02:00
  • cc94bdf05b fix(docker-compose): serve buttercup-ui on 31323 internally (#549) Riccardo Schirone 2026-05-18 15:53:48 +02:00
  • 85ccf9b9fe fix(program-model): drop redundant deadsnakes PPA on Ubuntu 24.04 (#554) Riccardo Schirone 2026-05-18 15:53:26 +02:00
  • 1b8bd65986 fix(scripts): make install_uv resilient to missing env helper (#547) Riccardo Schirone 2026-05-18 15:53:06 +02:00
  • e516fe42fb fix(setup-local): detect existing buildx, fall back to docker-buildx pkg (#546) Riccardo Schirone 2026-05-18 15:52:39 +02:00
  • ec7031c5ef fix(common): use budgeted LITELLM_API_KEY so LITELLM_MAX_BUDGET is enforced (#550) Riccardo Schirone 2026-05-18 15:52:14 +02:00
  • ed546c2d50 Merge remote-tracking branch 'origin/main' into claude/issue-220-20250804-1147 claude/issue-220-20250804-1147 Riccardo Schirone 2026-05-15 14:50:29 +00:00
  • d6da62d06c feat(llm): bump seed-gen and patcher agents to newest models fix/litellm-gpt5-temperature Riccardo Schirone 2026-05-15 14:40:08 +00:00
  • 93c0afcd07 fix(litellm): drop unsupported temperature for GPT-5.x models Riccardo Schirone 2026-05-15 14:37:05 +00:00
  • b370394146 feat(scripts): add docker-only e2e command for example-libpng worktree-e2e-command Riccardo Schirone 2026-05-14 16:31:48 +02:00
  • 4937a76477 feat(llm): narrow new model set to opus 4.6/4.7, sonnet 4.6, haiku 4.5 + gpt-5.4/5.4-mini/5.5 Riccardo Schirone 2026-05-14 16:16:22 +02:00
  • 8b53427049 feat(llm): add newer Anthropic and OpenAI models to LiteLLM Riccardo Schirone 2026-05-14 16:07:47 +02:00
  • 4cc95c6659 build(deps): bump langchain-classic (#543) dependabot[bot] 2026-05-14 08:17:19 +02:00
  • fb8aa17076 build(deps): bump the uv group across 7 directories with 1 update (#541) dependabot[bot] 2026-05-11 19:08:41 +02:00
  • 683044d5df build(deps): bump langchain-core (#540) dependabot[bot] 2026-05-11 10:36:31 +02:00
  • ee57d23997 build(deps): bump the uv group across 7 directories with 2 updates (#539) dependabot[bot] 2026-05-11 09:35:11 +02:00
  • 0f67b4812d build(deps): bump langchain-openai to 1.1.14 and pytest to 9.0.3 (#537) Henrik Brodin 2026-04-28 15:21:40 +02:00
  • a3d805cb35 ci: shell-quote env values in system-integration workflow (#536) Henrik Brodin 2026-04-27 13:06:47 +02:00
  • b3e58516ac build(deps): bump the uv group across 7 directories with 2 updates (#535) dependabot[bot] 2026-04-27 09:26:55 +02:00
  • 7f8c75a49e build(deps): bump astral-sh/setup-uv (#534) dependabot[bot] 2026-04-27 09:22:32 +02:00
  • ae58bb8e8a build(deps): bump the uv group across 7 directories with 3 updates (#533) dependabot[bot] 2026-04-27 09:08:43 +02:00
  • db794fa1c7 build(deps): bump the uv group across 7 directories with 2 updates (#531) dependabot[bot] 2026-04-20 10:03:24 +02:00
  • 9ad65cf91c build(deps): bump the actions group with 3 updates (#532) dependabot[bot] 2026-04-20 09:44:52 +02:00
  • c7c47eba55 build(deps): bump docker/login-action in the actions group (#521) dependabot[bot] 2026-04-13 10:00:27 +02:00
  • 6703c453e8 build(deps): bump langchain-core from 1.2.23 to 1.2.28 in /patcher (#520) dependabot[bot] 2026-04-09 09:06:55 +02:00
  • ec41f764cd build(deps): bump langchain-core from 1.2.23 to 1.2.28 in /common (#518) dependabot[bot] 2026-04-09 09:06:48 +02:00
  • a854399a12 build(deps): bump langchain-core from 1.2.23 to 1.2.28 in /fuzzer_runner (#517) dependabot[bot] 2026-04-09 09:06:37 +02:00
  • 8b36cb86ea build(deps): bump langchain-core from 1.2.23 to 1.2.28 in /orchestrator (#519) dependabot[bot] 2026-04-09 09:06:28 +02:00
  • 0276f04eb8 build(deps): bump cryptography from 46.0.6 to 46.0.7 in /common (#515) dependabot[bot] 2026-04-09 09:05:43 +02:00
  • c8196929ee build(deps): bump cryptography from 46.0.6 to 46.0.7 in /fuzzer (#516) dependabot[bot] 2026-04-09 09:05:24 +02:00
  • 5add488707 build(deps): bump langchain-core from 1.2.23 to 1.2.28 in /fuzzer (#514) dependabot[bot] 2026-04-09 09:03:33 +02:00
  • 07386f6bc7 build(deps): bump langchain-core from 1.2.23 to 1.2.28 in /seed-gen (#513) dependabot[bot] 2026-04-09 09:03:13 +02:00
  • 5239596045 build(deps): bump cryptography from 46.0.6 to 46.0.7 in /patcher (#512) dependabot[bot] 2026-04-09 09:02:56 +02:00
  • e3c2ccc1bf build(deps): bump cryptography from 46.0.6 to 46.0.7 in /orchestrator (#511) dependabot[bot] 2026-04-09 09:02:33 +02:00
  • 3340b93491 build(deps): bump langchain-core from 1.2.23 to 1.2.28 in /program-model (#510) dependabot[bot] 2026-04-09 09:02:15 +02:00
  • ea0a3e1cae build(deps): bump cryptography from 46.0.6 to 46.0.7 in /program-model (#509) dependabot[bot] 2026-04-09 09:01:57 +02:00
  • f62ba9cfad build(deps): bump cryptography from 46.0.6 to 46.0.7 in /seed-gen (#508) dependabot[bot] 2026-04-09 09:01:41 +02:00
  • b0b460b501 build(deps): bump cryptography from 46.0.6 to 46.0.7 in /fuzzer_runner (#507) dependabot[bot] 2026-04-09 09:01:24 +02:00
  • db9532728d build(deps): bump the actions group with 2 updates (#505) dependabot[bot] 2026-04-09 09:01:05 +02:00
  • d98c7a5e71 build(deps): bump aiohttp from 3.13.3 to 3.13.4 in /patcher (#504) dependabot[bot] 2026-04-09 09:00:28 +02:00
  • fbd9c1a403 Add SARIF file submission button and form frabert/buttercup-improvements Francesco Bertolaccini 2026-03-26 13:26:36 +00:00
  • a6c9a3755c Add JSON file upload to task submission form Francesco Bertolaccini 2026-02-10 14:04:15 +00:00
  • c6da918c8f Add cancel button to dashboard UI for active tasks Francesco Bertolaccini 2026-02-10 14:04:05 +00:00
  • 1bff975d4d Add task cancellation endpoint to dashboard API Francesco Bertolaccini 2026-02-10 14:03:13 +00:00
  • e36e0dacd3 refactor: move langfuse import to top level in llm.py Henrik Brodin 2026-03-26 11:18:45 +01:00
  • 57c0426890 fix(ci): remove stale pip-audit ignores for orjson and protobuf Henrik Brodin 2026-03-26 11:03:16 +01:00
  • 16a6930a94 fix(ci): fix import sorting and ignore unfixed pygments CVE Henrik Brodin 2026-03-26 11:01:15 +01:00
  • f955bf12d1 build(deps): update langchain ecosystem and transitive dependencies Henrik Brodin 2026-03-24 13:55:08 +01:00
  • 5a354888bd Split SARIF broadcasts into a deduplicated finding pool frabert/split-sarifs Francesco Bertolaccini 2026-04-08 09:10:55 +00:00
  • 946d5ba6d9 build(deps): bump pygments from 2.19.2 to 2.20.0 in /orchestrator (#503) dependabot[bot] 2026-03-30 23:16:09 +02:00
  • a20170e6c6 build(deps): bump langchain-core and cryptography for security fixes (#502) Henrik Brodin 2026-03-30 09:34:17 +02:00
  • 54acdcef42 build(deps): bump cryptography from 46.0.5 to 46.0.6 in /patcher (#501) dependabot[bot] 2026-03-30 08:26:11 +02:00
  • 3519f1d729 build(deps): bump cryptography from 46.0.5 to 46.0.6 in /fuzzer (#500) dependabot[bot] 2026-03-30 08:25:39 +02:00
  • 6d869033b6 build(deps): bump langchain-core from 1.2.21 to 1.2.22 in /common (#499) dependabot[bot] 2026-03-30 08:24:44 +02:00
  • 8d0048f577 build(deps): bump the actions group across 1 directory with 8 updates (#498) dependabot[bot] 2026-03-27 10:28:42 +01:00
  • 04469d6a53 build(deps): bump requests from 2.32.5 to 2.33.0 across all components (#497) Henrik Brodin 2026-03-27 10:00:04 +01:00
  • 385ea5ce93 Update langchain ecosystem and transitive dependencies (#490) Henrik Brodin 2026-03-27 09:33:50 +01:00
  • 55a4c64a19 build(deps): bump the actions group with 3 updates (#478) dependabot[bot] 2026-03-09 09:48:36 +01:00
  • 59e39f1793 fix(deps): fix lint errors from langchain/langfuse upgrade fix/dependabot-langchain-langgraph-upgrades Henrik Brodin 2026-03-03 13:29:27 +01:00
  • 1e1faabbff fix(deps): upgrade langchain ecosystem to 1.x and fix Dependabot alerts Henrik Brodin 2026-03-03 13:22:19 +01:00
  • d9e7d0b60b build(deps): bump docker/build-push-action in the actions group (#476) dependabot[bot] 2026-03-02 08:53:41 +01:00
  • 1adc774d33 docs: add Colima and docker-buildx setup instructions for macOS (#474) Akshith G 2026-02-23 09:15:34 -08:00
  • ed723f40de build(deps): bump astral-sh/setup-uv in the actions group (#473) dependabot[bot] 2026-02-16 09:55:09 +01:00
  • 77a3e77936 Create minikube config for a large machine (16 CPU, 128 GB) (#469) Ronald Eytchison 2026-02-12 08:32:55 -05:00
  • fb9a40cfc9 docs: add Redis testing guidance to CLAUDE.md (#472) Henrik Brodin 2026-02-11 10:53:44 +01:00
  • b5aa20d0b4 build(deps): bump cryptography from 46.0.3 to 46.0.5 in remaining components (#471) Henrik Brodin 2026-02-11 10:53:29 +01:00
  • e6aa09c831 build(deps): bump cryptography from 46.0.3 to 46.0.5 in /fuzzer (#470) dependabot[bot] 2026-02-11 08:58:31 +01:00
  • 53861baf95 WIP enable corpus tmpfs and scale worker resources ron/wip-scale-minikube ron/scale-minikube Ronald Eytchison 2026-02-10 15:45:33 -05:00
  • 9977458b2e Add limits for more pods, scale down fuzzer replicas Ronald Eytchison 2026-01-29 10:14:33 -05:00
  • 36063c371e Add extract-crashes subcommand to buttercup-util Ronald Eytchison 2026-01-26 11:25:43 -05:00
  • a496bb0f1d Update guidance Ronald Eytchison 2026-01-23 09:53:48 -05:00
  • 5a256c458c Add helm config for a large minikube deployment Ronald Eytchison 2026-01-23 09:48:47 -05:00
  • fe8a7ea803 Create debug-buttercup skill ron/debug-skill Ronald Eytchison 2026-02-10 15:34:14 -05:00
  • 7f10615d76 build(deps): bump the actions group with 2 updates (#466) dependabot[bot] 2026-02-09 09:12:28 +01:00
  • 09f2980ff9 Add optional tmpfs storage for fuzzing corpus (#461) Henrik Brodin 2026-02-06 20:10:45 +01:00
  • 22cebd4897 Fix starlette security vulnerabilities (CVE-2025-62727, CVE-2025-54121) (#465) Henrik Brodin 2026-02-04 20:32:07 +01:00
  • 0268403c44 Update protobuf to 6.33.5 to fix high severity security vulnerability (#463) Henrik Brodin 2026-02-04 20:28:24 +01:00
  • 240112f2a6 Only copy generated seeds to node-local corpus (#460) Ronald Eytchison 2026-01-27 17:19:59 -05:00
  • 3c3ae36a11 Fix fuzzer-runner missing transitive dependency and add tests (#459) Ronald Eytchison 2026-01-27 17:13:53 -05:00
  • e826b53530 Fix CoverageBot.run_task and add test cases (#458) Ronald Eytchison 2026-01-27 17:13:34 -05:00
  • a31b670a2e Fix: Use Openlit <1.36.6 to avoid bug with langgraph instrumentation (#457) Ronald Eytchison 2026-01-27 16:28:41 -05:00