Skip to content

Commit 6b99d69

Browse files
committed
Migrate all YAML files to version "1.0" string format
Update all taskflows, personalities, prompts, toolboxes, and configs to use semver string version format for compatibility with seclab-taskflow-agent v1.0.
1 parent d57c2f3 commit 6b99d69

File tree

55 files changed

+290
-340
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

55 files changed

+290
-340
lines changed

src/seclab_taskflows/configs/model_config.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
# SPDX-License-Identifier: MIT
33

44
seclab-taskflow-agent:
5-
version: 1
5+
version: "1.0"
66
filetype: model_config
77
models:
88
code_analysis: gpt-5

src/seclab_taskflows/configs/model_config_codeql_python.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
# SPDX-License-Identifier: MIT
33

44
seclab-taskflow-agent:
5-
version: 1
5+
version: "1.0"
66
filetype: model_config
77
models:
88
code_analysis: gpt-5

src/seclab_taskflows/configs/model_config_lowercost.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
# SPDX-License-Identifier: MIT
33

44
seclab-taskflow-agent:
5-
version: 1
5+
version: "1.0"
66
filetype: model_config
77
models:
88
code_analysis: gpt-5-mini

src/seclab_taskflows/personalities/action_expert.yaml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,7 @@
33

44
seclab-taskflow-agent:
55
filetype: personality
6-
version: 1
7-
6+
version: "1.0"
87
personality: |
98
You are an expert in GitHub actions and workflows. A GitHub workflow maybe reusuable by other workflows.
109
Here are some important facts about GitHub actions and workflows that you should know and used in your analysis.

src/seclab_taskflows/personalities/auditor.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
# SPDX-License-Identifier: MIT
33

44
seclab-taskflow-agent:
5-
version: 1
5+
version: "1.0"
66
filetype: personality
77

88
personality: |

src/seclab_taskflows/personalities/web_application_security_expert.yaml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,7 @@
33

44
seclab-taskflow-agent:
55
filetype: personality
6-
version: 1
7-
6+
version: "1.0"
87
personality: |
98
You are a security expert for web applications and libraries, in multiple programming languages.
109
You have the ability to call tools to aid you in your security reviews. You know when libraries are used in an unsafe way.

src/seclab_taskflows/prompts/audit/audit_issue.yaml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,7 @@
33

44
seclab-taskflow-agent:
55
filetype: prompt
6-
version: 1
7-
6+
version: "1.0"
87
prompt: |
98
The issues suggested have not been properly verified and are only suggested because they are common issues in these types of
109
application. Your task is to audit the source code to check if this type of issues is present.

src/seclab_taskflows/prompts/triage_taskflows/actions_common/check_dismiss_reason.yaml

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -3,21 +3,20 @@
33

44
seclab-taskflow-agent:
55
filetype: prompt
6-
version: 1
7-
6+
version: "1.0"
87
prompt: |
9-
The key is {{ RESULT_key }}. If it is `repos` or `dismissed_alerts_summary,` then your task is done.
8+
The key is {{ result.key }}. If it is `repos` or `dismissed_alerts_summary,` then your task is done.
109
11-
The repo and alert id can are encoded in the key {{ RESULT_key }} as follows:
10+
The repo and alert id can are encoded in the key {{ result.key }} as follows:
1211
```
1312
<encoded_repo_name>_<alert id>
1413
```
1514
For example, if the key is `my_org/my_repo_123`, the repo name to use is `my_org/my_repo`.
1615
The alert id is the number after the last `_` in the key, which is `123` in this case.
1716
18-
Before you start, check if an issue with the alert id already exists in {{ RESULT_repo }}.
17+
Before you start, check if an issue with the alert id already exists in {{ result.repo }}.
1918
If it doesn't, then your task is done.
20-
Otherwise, fetch the issue from {{ RESULT_repo }} using the issue id that you found and inspect its body.
19+
Otherwise, fetch the issue from {{ result.repo }} using the issue id that you found and inspect its body.
2120
Remember the issue id, which you'll need to add label and comment on the issue later.
2221
This is usually not the same as the alert id.
2322

src/seclab_taskflows/prompts/triage_taskflows/actions_common/dismiss_decision.yaml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,7 @@
33

44
seclab-taskflow-agent:
55
filetype: prompt
6-
version: 1
7-
6+
version: "1.0"
87
prompt: |
98
If you decided that the ANY dismissal reason applies then alert is invalid. In this case, add the `FP` label to the issue.
109
But if the None of the dismissal reason applies, then don't add the `FP` label.

src/seclab_taskflows/taskflows/alert_triage_examples/triage_common/check_notes.yaml

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,7 @@
33

44
seclab-taskflow-agent:
55
filetype: taskflow
6-
version: 1
7-
6+
version: "1.0"
87
model_config: seclab_taskflows.configs.model_config
98

109
taskflow:
@@ -17,10 +16,10 @@ taskflow:
1716
- seclab_taskflows.personalities.web_application_security_expert
1817
async: true
1918
user_prompt: |
20-
The alert_id is {{ RESULT_alert_id }} and the repo is {{ RESULT_repo }}.
19+
The alert_id is {{ result.alert_id }} and the repo is {{ result.repo }}.
2120
The notes from the alert analysis is:
2221
```
23-
{{ RESULT_result }}
22+
{{ result.result }}
2423
```
2524
Check all results whether they contain next steps that need to be taken. If they do, then take those steps.
2625
In case code parts (such as methods) were not found previously, look them up and change the notes accordingly.

0 commit comments

Comments
 (0)