Skip to content

Feat/oss fuzz integration#8

Open
0ai-Cyberviser wants to merge 64 commits intocyberviser:mainfrom
0ai-Cyberviser:feat/oss-fuzz-integration
Open

Feat/oss fuzz integration#8
0ai-Cyberviser wants to merge 64 commits intocyberviser:mainfrom
0ai-Cyberviser:feat/oss-fuzz-integration

Conversation

@0ai-Cyberviser
Copy link
Copy Markdown

@0ai-Cyberviser 0ai-Cyberviser commented Mar 26, 2026

Description

Type of Change

  • 🐛 Bug fix
  • ✨ New feature
  • 📝 Documentation update
  • 🤖 Training data addition
  • 🔧 Refactor / cleanup

Related Issue

Closes #

Changes Made

Testing

  • Tested CLI mode
  • Tested API server (/v1/chat, /v1/triage, etc.)
  • Verified no secrets in committed files

Checklist

  • My code follows the existing style
  • I have NOT committed .env or any API keys
  • All training data is from public, legally sourced knowledge bases
  • The agent's ethical guardrails remain intact

0ai-Cyberviser and others added 30 commits March 23, 2026 05:17
@0ai-Cyberviser
Update hancock_pipeline.py to add orchestration functions for automat…
0d07193 
…ed reconnaissance, exploitation, and post-exploitation tool integration including run_full_assessment() with allowlist safety checks.
@0ai-Cyberviser
Update requirements.txt to add dependencies for tool integration supp…
8d45026 
…ort: xmltodict, requests, and pytest.
@0ai-Cyberviser
Add smoke tests for tool integrations
8c7d8f6
@0ai-Cyberviser
Add Nmap reconnaissance automation script with XML parsing to JSON
552a84e
@0ai-Cyberviser
Create Burp Suite REST API automation for scope management, active sc…
cd7e96d 
…anning, and report generation
@0ai-Cyberviser
Add SQLMap REST API automation script for SQL injection testing with …
51f405a 
…task management and vulnerability detection.
@0ai-Cyberviser
Create comprehensive tool integration documentation
41a15af
@0ai-Cyberviser
Create orchestration_controller.py file to implement orchestration lo…
4eef519 
…gic with safety checks
@0ai-Cyberviser
Create IMPLEMENTATION_SUMMARY.md with project status and completion d…
5e6fe69 
…etails for Phase 1
Initial plan
3d3a72f
Initial plan
051be9f
@0ai-Cyberviser
Fix 6 critical bugs in hancock_agent.py and add comprehensive test suite
82fd4de 
Co-authored-by: 0ai-Cyberviser <266508493+0ai-Cyberviser@users.noreply.github.com>
Agent-Logs-Url: https://github.com/0ai-Cyberviser/Hancock/sessions/9dff34cc-f497-4f74-a963-c41a4d2d25de
@0ai-Cyberviser
Merge pull request #1 from 0ai-Cyberviser/copilot/fix-critical-bugs-a…
43169a5 
…nd-add-tests

[WIP] Fix critical bugs and add test suite for readiness
@0ai-Cyberviser
Merge pull request #3 from 0ai-Cyberviser/copilot/implement-branch-pr…
46ce360 
…otection-enforcement
Initial plan
595f96c
@0ai-Cyberviser
Fix critical bugs: hancock_pipeline.py E999 SyntaxError, requirements…
b484be7 
….txt placeholders, nmap ImportError, run_nmap/run_sqlmap/run_burp_full_scan functions, split urllib imports

Co-authored-by: 0ai-Cyberviser <266508493+0ai-Cyberviser@users.noreply.github.com>
Agent-Logs-Url: https://github.com/0ai-Cyberviser/Hancock/sessions/ff3edba7-164f-4ced-866b-76be411583b4
feat: add monitoring stack (metrics, health checks, logging, Grafana …
616c158 
…dashboard, alerting rules)

- monitoring/metrics_exporter.py: Prometheus histograms/gauges/counters
  (hancock_request_duration_seconds, hancock_requests_total,
   hancock_model_response_time_seconds, hancock_rate_limit_exceeded_total,
   hancock_memory_usage_bytes, hancock_active_connections)
  with no-op fallback when prometheus_client is not installed
- monitoring/health_check.py: deep health checks for Ollama, NVIDIA NIM,
  memory, disk, and Prometheus with 30 s TTL caching
- monitoring/logging_config.py: structured JSON logging with thread-local
  request-ID correlation and optional Flask integration
- monitoring/prometheus_dashboard.py: generates grafana_dashboard.json
- monitoring/grafana_dashboard.json: Grafana dashboard (timeseries + stat
  panels for all six key metrics)
- monitoring/alerting_rules.yaml: Prometheus alerting rules for error rate
  >5 %, p99 >5 s, model unavailability, rate-limit exhaustion, memory growth

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
fix: use datetime.fromtimestamp for consistent UTC timestamps in Json…
0f3aa6d 
…Formatter

Replace separate time.gmtime() + record.msecs calls (which could drift
across a second boundary) with a single datetime.fromtimestamp() call
that derives both seconds and milliseconds from record.created.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
feat: add deployment configurations in deploy/
cfb1e84 
- deploy/Dockerfile: multi-stage build (builder + runtime stages)
- deploy/docker-compose.yml: Hancock + Ollama + Prometheus + Grafana
- deploy/k8s/: Deployment, HPA, Service, ConfigMap, Secret template
- deploy/helm/: Chart.yaml, values.yaml, templates/deployment.yaml
- deploy/terraform/main.tf: AWS ECS Fargate + ALB + auto-scaling + CloudWatch
- deploy/startup_checks.py: pre-flight Python/import/env-var validation
- deploy/graceful_shutdown.py: SIGTERM/SIGINT handler for clean shutdown

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
fix: address code review feedback in deploy configs
8dafce1 
- deploy/docker-compose.yml: fix comment to say '../Dockerfile'
- deploy/terraform/main.tf: simplify ECS health check to use curl
  instead of complex nested Python string interpolation

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Add test suite and CI/CD workflows for Hancock
9990d42 
- tests/conftest.py: shared fixtures (mock_openai_client, hancock_app,
  hancock_client, sample data) prefixed to avoid conflicts with existing tests
- tests/test_integration_deployment.py: Flask test client endpoint tests
  for /health, /metrics, /v1/chat, /v1/ask, /v1/triage, /v1/agents,
  /v1/hunt, /v1/code, /v1/yara, /v1/ioc with field and status assertions
- tests/test_performance.py: median latency + throughput regression tests
- tests/benchmark_suite.py: p50/p95/p99 latency benchmarks; runnable
  standalone for a summary table
- tests/load_test_locust.py: Locust HttpUser profiles (HealthOnly,
  ReadOnly, TypicalAnalyst, Spike, SOCAnalyst, Pentester)
- .github/workflows/test.yml: matrix lint + pytest for Python 3.10/3.11/3.12
- .github/workflows/benchmark.yml: PR latency regression benchmark
- .github/workflows/security.yml: Bandit SAST + pip-audit + Trivy image scan
- .github/workflows/release.yml: Docker build/push to GHCR + GitHub Release

All new Python files pass flake8 E9/F63/F7/F82.
All 186 tests pass (121 pre-existing + 65 new).
All workflow jobs carry explicit permissions blocks (contents: read).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
docs: add deployment, monitoring, performance, CI/CD, and production-…
c98d6af 
…checklist guides

- docs/deployment.md: Docker, Docker Compose, Kubernetes, Helm, Terraform (AWS ECS),
  Fly.io, environment variable reference, graceful shutdown
- docs/monitoring.md: Prometheus metrics, Grafana dashboard, alerting rule groups,
  health check API, structured logging setup, local stack quickstart
- docs/performance.md: p50/p95/p99 latency targets, benchmark suite usage,
  Locust load testing profiles, WSGI and HPA tuning guidance
- docs/production-checklist.md: actionable checklist across infrastructure,
  secrets, networking, scalability, observability, and testing categories
- docs/ci-cd.md: all GitHub Actions workflows (test, benchmark, security,
  release, deploy, finetune, CodeQL), required secrets, local equivalents

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@0ai-Cyberviser
Merge pull request #5 from 0ai-Cyberviser/copilot/fix-bugs-in-hancock…
ed7594d 
…-agent

[WIP] Fix bugs in hancock_agent.py for clean implementation
Initial plan
fbb0c6b
@0ai-Cyberviser
Fix CI workflows: update Trivy action to v0.35.0 and exclude .venv fr…
a08e561 
…om flake8

Co-authored-by: 0ai-Cyberviser <266508493+0ai-Cyberviser@users.noreply.github.com>
Agent-Logs-Url: https://github.com/0ai-Cyberviser/Hancock/sessions/4d1074f1-6853-4775-9319-0a6befe51e63
@0ai-Cyberviser
Merge pull request #7 from 0ai-Cyberviser/copilot/fix-ci-workflows-tr…
1b16299 
…ivy-flake8

Fix security.yml Trivy action version and python-package.yml flake8 .venv exclusion
Initial plan
8a3e4ad
@0ai-Cyberviser
Fix security.yml: correct Dockerfile path and Trivy exit-code
473f0c8 
Co-authored-by: 0ai-Cyberviser <266508493+0ai-Cyberviser@users.noreply.github.com>
Agent-Logs-Url: https://github.com/0ai-Cyberviser/Hancock/sessions/f5104d93-3451-43d6-9194-bf1da017e5d4
@0ai-Cyberviser
Merge pull request #8 from 0ai-Cyberviser/copilot/fix-trivy-image-job…
33ae196 
…-errors

Fix security.yml trivy-image job: wrong Dockerfile path and failing exit-code
Initial plan
64e03c9
Copilot AI reviewed Mar 28, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 90 out of 92 changed files in this pull request and generated 11 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@0ai-Cyberviser
Update collectors/nmap_recon.py
487de10 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: 0ai <0ai@cyberviserai.com>
Copilot AI review requested due to automatic review settings March 29, 2026 00:09
@0ai-Cyberviser
Copy link
Copy Markdown
Author

0ai-Cyberviser commented Mar 29, 2026

@copilot apply changes based on the comments in this thread

@0ai-Cyberviser
Copy link
Copy Markdown
Author

0ai-Cyberviser commented Mar 29, 2026

@copilot apply changes based on the comments in this thread

Copilot AI reviewed Mar 29, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 90 out of 92 changed files in this pull request and generated 3 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@0ai-Cyberviser
Update deploy/docker-compose.yml
8c5b1a8 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: 0ai <0ai@cyberviserai.com>
Copilot AI review requested due to automatic review settings March 29, 2026 01:01
Copilot AI reviewed Mar 29, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 90 out of 92 changed files in this pull request and generated 6 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@0ai-Cyberviser 0ai-Cyberviser requested a review from Copilot March 29, 2026 02:29
@0ai-Cyberviser 0ai-Cyberviser marked this pull request as draft March 29, 2026 02:33
@0ai-Cyberviser 0ai-Cyberviser marked this pull request as ready for review March 29, 2026 02:33
Copilot AI reviewed Mar 29, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 90 out of 92 changed files in this pull request and generated 2 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@0ai-Cyberviser
Update deploy/docker-compose.yml
1841b90 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: 0ai <0ai@cyberviserai.com>
Copilot AI review requested due to automatic review settings March 29, 2026 02:42
Copilot AI reviewed Mar 29, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 90 out of 92 changed files in this pull request and generated 7 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@0ai-Cyberviser
Update deploy/k8s/service.yaml
9634612 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: 0ai <0ai@cyberviserai.com>
Copilot AI review requested due to automatic review settings March 29, 2026 03:22
Copilot AI reviewed Mar 29, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 90 out of 92 changed files in this pull request and generated 5 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@0ai-Cyberviser
Copy link
Copy Markdown
Author

0ai-Cyberviser commented Mar 29, 2026

@copilot apply changes based on the comments in this thread

@0ai-Cyberviser
Copy link
Copy Markdown
Author

0ai-Cyberviser commented Mar 29, 2026

@copilot apply changes based on the comments in this thread

@0ai-Cyberviser
Copy link
Copy Markdown
Author

0ai-Cyberviser commented Mar 29, 2026

@copilot apply changes based on the comments in this thread

@0ai-Cyberviser
Copy link
Copy Markdown
Author

0ai-Cyberviser commented Mar 29, 2026

@copilot apply changes based on the comments in this thread

0ai-Cyberviser
0ai-Cyberviser commented Mar 29, 2026
View reviewed changes
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

At least 0 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@0ai-Cyberviser