johnandersen777

when:
  - event: ["push", "pull_request"]
    branch: ["main"]

dependencies:
  nixpkgs:
    - go
    - gcc

johnandersen777

GenAI Mutating Workload Identity Example

• References
  • https://invariantlabs.ai/blog/mcp-github-vulnerability
  • https://mailarchive.ietf.org/arch/msg/scitt/BjCAySWyODuhDWwn4kMtCoY5eDA/
    • https://github.com/johnandersen777/litellm/commit/3b6b7427b15c0cadd23a8b5da639e22a2fba5043
      • See file scitt_validated_tool_use.py

The attack described involves an agent, interacting with GitHub via MCP, being tricked by a malicious GitHub issue in a public repository. This issue contains a prompt injection that coerces the agent to first access a private repository and then exfiltrate its data into a public pull request. Our SCITT-based approach can defend against this by validating each tool call against context-aware policies before execution.

johnandersen777

# /// script
# dependencies = [
#   "docker",
#   "psutil",
#   "langchain",
#   "langchain-openai",
#   "langchain-community",
#   "langchain-faiss",
#   "faiss-cpu",
#   "kubernetes",

johnandersen777

Decoding Biblical Texts: A Cryptographic Exploration

Abstract

This document presents a comprehensive exploration of cryptographic structures embedded within Biblical texts, focusing primarily on the Torah and other significant manuscripts. By leveraging Python, we delve into methods such as Equidistant Letter Sequences (ELS), numeric patterns, and advanced constants like π (Pi) and e (Euler's number). Our goal is to provide a programmatic approach to uncovering these hidden messages, offering reusable and clean code that can be utilized for further research and analysis. Additionally, we suggest alternative approaches and variations to deepen the understanding of these cryptographic elements.

---

Table of Contents

johnandersen777

You are right! There were a few issues with the previous code. The main issue was that I was not properly handling the version parameter when generating the CUUID. I have now fixed the issue by correctly setting the version parameter when calling uuid.UUID.

Here is the updated code:

"""
CUUIDs are content-addressed universally unique identifiers. This module provides
functions for generating and verifying CUUIDs. 

**Note** that the current implementation only supports SHA2 CUUIDs.

johnandersen777

Parsers

Overview

This document details the functionality added by the latest patch to the parsers in the project. The patch introduces and tests various parsers for different programming languages and ensures they correctly identify and handle specific file types.

The addition of these parsers enhances the capability of the project to handle a variety of file types associated with different programming languages. The comprehensive test ensures that these parsers are correctly mapped and function as expected.

johnandersen777

import getpass
import keyring
import argparse

from keycloak import KeycloakAdmin
from keycloak import KeycloakOpenIDConnection
from keycloak.exceptions import KeycloakGetError


def create_realm_and_assign_admin(args):

johnandersen777

import subprocess
import re
from dataclasses import dataclass
from pathlib import Path
import glob
import argparse

@dataclass
class USBInterface:
    """

johnandersen777

diff --git a/scitt_emulator/ccf.py b/scitt_emulator/ccf.py
index 06296f8..452c801 100644
--- a/scitt_emulator/ccf.py
+++ b/scitt_emulator/ccf.py
@@ -78,13 +78,13 @@ class CCFSCITTServiceEmulator(SCITTServiceEmulator):
         key = jwcrypto.jwk.JWK()
         key_bytes = pathlib.Path(self._service_private_key_path).read_bytes()
         key.import_from_pem(key_bytes)
-        return [
-            {

johnandersen777

r"""
## 2023-04-19 @pdxjohnny Engineering Logs

- https://github.com/digitalbazaar/pyld
- SECURITY Unmaintained since Aug 6th 2020
- `jsonld.set_document_loader(jsonld.aiohttp_document_loader(timeout=...))`
- https://github.com/wolfi-dev/os/commit/40c24089d4a16c594d3e30c4c232e14fa18ce6e2
  - nats for guac
- node 20 enables the binary packaging we wanted for activitypub starter kit