Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
GenAI-Security-Project
/
finbot-ctf
Public
Notifications
You must be signed in to change notification settings
Fork
55
Star
77
Code
Issues
232
Pull requests
172
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Actions: GenAI-Security-Project/finbot-ctf
Actions
All workflows
Workflows
AEGIS Benchmark Suite
AEGIS Benchmark Suite
Copilot
Copilot
Copilot code review
Copilot code review
Dependabot Updates
Dependabot Updates
Test Suite with Google Sheets Reporting
Test Suite with Google Sheets Reporting
Show more workflows...
Management
Caches
All workflows
All workflows
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Showing runs from all workflows
will be ignored since log searching is not yet available
541 workflow runs
541 workflow runs
Workflow
Filter by Workflow
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching workflows.
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
feat:Add MCP scenario module with tool poisoning, policy misconfig, detectors and CTF challenges
Test Suite with Google Sheets Reporting
#665:
Pull request
#581
opened by
nitinawari
1m 2s
nitinawari:feat/mcp-ctf-scenarios
nitinawari:feat/mcp-ctf-scenarios
1m 2s
View #581
View workflow file
Fix: DNS-based SSRF bypass in guardrail webhook URL validation
Test Suite with Google Sheets Reporting
#664:
Pull request
#575
synchronize by
Deez-Automations
Action required
Deez-Automations:fix/labs-guardrail-webhook-ssrf-535
Deez-Automations:fix/labs-guardrail-webhook-ssrf-535
Action required
View #575
View workflow file
Fix: orchestrator confirms payment to vendor even when it fails
Test Suite with Google Sheets Reporting
#663:
Pull request
#574
synchronize by
Deez-Automations
Action required
Deez-Automations:fix/orchestrator-payment-status-next-step-460
Deez-Automations:fix/orchestrator-payment-status-next-step-460
Action required
View #574
View workflow file
feat(ctf): Cross-Vendor Email (BOLA/IDOR, ASI-03)
Test Suite with Google Sheets Reporting
#662:
Pull request
#558
synchronize by
Deez-Automations
Action required
Deez-Automations:feat/ctf-cross-vendor-email
Deez-Automations:feat/ctf-cross-vendor-email
Action required
View #558
View workflow file
fix: reject whitespace-only task_summary in orchestrator context capture (#459)
Test Suite with Google Sheets Reporting
#661:
Pull request
#580
opened by
Deez-Automations
Action required
Deez-Automations:fix/orchestrator-whitespace-summary-459
Deez-Automations:fix/orchestrator-whitespace-summary-459
Action required
View #580
View workflow file
fix: guard vendor_id/invoice_id=None in chat assistant tool callables (#418)
Test Suite with Google Sheets Reporting
#660:
Pull request
#579
opened by
Deez-Automations
Action required
Deez-Automations:fix/chat-vendor-id-none-guard-418
Deez-Automations:fix/chat-vendor-id-none-guard-418
Action required
View #579
View workflow file
Fix: profile share-card cache key omits fields that affect the render
Test Suite with Google Sheets Reporting
#659:
Pull request
#578
opened by
Deez-Automations
Action required
Deez-Automations:fix/profile-share-card-cache-key-508
Deez-Automations:fix/profile-share-card-cache-key-508
Action required
View #578
View workflow file
Fix: Dark Lab tool override silently drops parameters/inputSchema
Test Suite with Google Sheets Reporting
#658:
Pull request
#577
opened by
Deez-Automations
Action required
Deez-Automations:fix/mcp-tool-override-parameters-dropped-547
Deez-Automations:fix/mcp-tool-override-parameters-dropped-547
Action required
View #577
View workflow file
Fix: guardrail payload corruption before signing + missing after_tool for complete_task
Test Suite with Google Sheets Reporting
#657:
Pull request
#576
opened by
Deez-Automations
Action required
Deez-Automations:fix/guardrail-payload-truncation-after-tool-525
Deez-Automations:fix/guardrail-payload-truncation-after-tool-525
Action required
View #576
View workflow file
Fix: DNS-based SSRF bypass in guardrail webhook URL validation
Test Suite with Google Sheets Reporting
#656:
Pull request
#575
opened by
Deez-Automations
Action required
Deez-Automations:fix/labs-guardrail-webhook-ssrf-535
Deez-Automations:fix/labs-guardrail-webhook-ssrf-535
Action required
View #575
View workflow file
Running Copilot Code Review
Copilot
#19:
by
Copilot
AI
4m 5s
main
main
4m 5s
Fix: orchestrator confirms payment to vendor even when it fails
Test Suite with Google Sheets Reporting
#655:
Pull request
#574
opened by
Deez-Automations
Action required
Deez-Automations:fix/orchestrator-payment-status-next-step-460
Deez-Automations:fix/orchestrator-payment-status-next-step-460
Action required
View #574
View workflow file
feat(trace): add investigation submission endpoint and The Debrief challenge
Test Suite with Google Sheets Reporting
#654:
Pull request
#573
opened by
stealthwhizz
59s
stealthwhizz:feature/trace-purple-team-evaluator
stealthwhizz:feature/trace-purple-team-evaluator
59s
View #573
View workflow file
feat(trace): add ContextInjectionDetector with 14 tests
Test Suite with Google Sheets Reporting
#653:
Pull request
#572
opened by
stealthwhizz
58s
stealthwhizz:feature/trace-context-injection-detector
stealthwhizz:feature/trace-context-injection-detector
58s
View #572
View workflow file
feat(trace): add The Canary honeypot challenge
Test Suite with Google Sheets Reporting
#652:
Pull request
#571
opened by
stealthwhizz
1m 6s
stealthwhizz:feature/trace-canary-challenge
stealthwhizz:feature/trace-canary-challenge
1m 6s
View #571
View workflow file
docs(trace): add multi-step challenge authoring guide
Test Suite with Google Sheets Reporting
#651:
Pull request
#570
opened by
stealthwhizz
52s
stealthwhizz:docs/trace-challenge-authoring
stealthwhizz:docs/trace-challenge-authoring
52s
View #570
View workflow file
feat(trace): add Canary throughput and Delegation Audit overhead benchmarks
Test Suite with Google Sheets Reporting
#650:
Pull request
#569
opened by
stealthwhizz
57s
stealthwhizz:feature/trace-qa-benchmarks
stealthwhizz:feature/trace-qa-benchmarks
57s
View #569
View workflow file
feat(trace): add regression tests for 13 pre-existing detectors
Test Suite with Google Sheets Reporting
#649:
Pull request
#568
opened by
stealthwhizz
55s
stealthwhizz:feature/trace-qa-regression-suite
stealthwhizz:feature/trace-qa-regression-suite
55s
View #568
View workflow file
GSoC 2026 Final Submission: OWASP FinBot CTF — Challenge Library, Rate Limiting, MCP Server, Bug Fixes
Test Suite with Google Sheets Reporting
#648:
Pull request
#567
opened by
ashike24
Action required
ashike24:feat/final-combined-submission
ashike24:feat/final-combined-submission
Action required
View #567
View workflow file
feat: add per-namespace agent rate limiting
Test Suite with Google Sheets Reporting
#647:
Pull request
#532
synchronize by
ashike24
Action required
ashike24:feat/week5-6-agent-rate-limiting
ashike24:feat/week5-6-agent-rate-limiting
Action required
View #532
View workflow file
feat: add ASI-03 and ASI-05 challenge library expansion
Test Suite with Google Sheets Reporting
#646:
Pull request
#521
synchronize by
ashike24
Action required
ashike24:main
ashike24:main
Action required
View #521
View workflow file
feat(labs): add defensive Guardrail blue challenge pack
Test Suite with Google Sheets Reporting
#645:
Pull request
#566
opened by
nitinawari
1m 5s
nitinawari:feat/labs-blue-challenge-pack
nitinawari:feat/labs-blue-challenge-pack
1m 5s
View #566
View workflow file
fix(mcp): reject negative limit in FinStripe list_transfers
Test Suite with Google Sheets Reporting
#644:
Pull request
#565
synchronize by
Deez-Automations
Action required
Deez-Automations:fix/finstripe-negative-limit-330
Deez-Automations:fix/finstripe-negative-limit-330
Action required
View #565
View workflow file
fix(mcp): reject control characters in FinDrive filenames
Test Suite with Google Sheets Reporting
#643:
Pull request
#561
synchronize by
Deez-Automations
Action required
Deez-Automations:fix/findrive-filename-log-injection-360
Deez-Automations:fix/findrive-filename-log-injection-360
Action required
View #561
View workflow file
fix(mcp): reject negative mock_balance in FinStripe get_account_balance
Test Suite with Google Sheets Reporting
#642:
Pull request
#564
synchronize by
Deez-Automations
Action required
Deez-Automations:fix/finstripe-negative-balance-329
Deez-Automations:fix/finstripe-negative-balance-329
Action required
View #564
View workflow file
Previous
1
2
3
4
5
…
21
22
Next
You can’t perform that action at this time.