Skip to content

Bytewhisper code ql testing #31544

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 7 commits into
base: master
Choose a base branch
from

Conversation

DrJekels
Copy link

@DrJekels DrJekels commented Jun 9, 2025

Thank you for contributing to LangChain!

  • CodeQL with Chat Sanitization/Validation Tool with Prompt Escape/Injection Documentation: "core:sanitize.py; how-to:Prevent-Prompt-Injection/Escape; infra:CodeQL"

  • Bytewhisper to add security testing to Langchain core:

    • Tested CodeQL in Actions and pushing the action to master for use in CI/CD testing for langchain-core. Built a tool for sanitizing/validating user supplied inputs for safe characters; with a tool to allow for user safe delimiters. Add documentation in the how-to section on preventing prompt injection/escape as a guide to help with building secure apps.
    • CodeQL action will need to be modified to work with desired branches.

DrJekels added 7 commits May 22, 2025 11:39
This will be used for SAST testing in the repo pipeline.
Update to Bytewhisper-CodeQL-Testing to run CodeQL Test on branch changes.
Merging with updates from master into CodeQL testing branch.
Merge from master for further security testing.
Updates for CodeQL testing.
@DrJekels DrJekels requested review from baskaryan and ccurme as code owners June 9, 2025 21:10
Copy link

vercel bot commented Jun 9, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
langchain ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jun 9, 2025 9:19pm

@dosubot dosubot bot added size:L This PR changes 100-499 lines, ignoring generated files. 🤖:security Related to security issues, CVEs labels Jun 9, 2025
Copy link

codspeed-hq bot commented Jun 9, 2025

CodSpeed Walltime Performance Report

Merging #31544 will not alter performance

Comparing DrJekels:Bytewhisper-CodeQL-Testing (36f59cd) with master (9ce9742)

⚠️ Unknown Walltime execution environment detected

Using the Walltime instrument on standard Hosted Runners will lead to inconsistent data.

For the most accurate results, we recommend using CodSpeed Macro Runners: bare-metal machines fine-tuned for performance measurement consistency.

Summary

✅ 13 untouched benchmarks

Copy link

codspeed-hq bot commented Jun 9, 2025

CodSpeed Instrumentation Performance Report

Merging #31544 will not alter performance

Comparing DrJekels:Bytewhisper-CodeQL-Testing (36f59cd) with master (9ce9742)

Summary

✅ 13 untouched benchmarks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🤖:security Related to security issues, CVEs size:L This PR changes 100-499 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant