Rename ExploitIQ/Agent morpheus to Exploit Intelligence by TamarW0 · Pull Request #258 · RHEcosystemAppEng/vulnerability-analysis

TamarW0 · 2026-06-21T01:00:22Z

No description provided.

vbelouso · 2026-06-21T01:00:44Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

TamarW0 · 2026-06-21T23:12:56Z

/retest

exploit-iq-pac · 2026-06-21T23:13:01Z

Caution

There are some errors in your PipelineRun template.

PipelineRun	Error
vulnerability-analysis-on-pr	`CEL expression evaluation error: expression "event == \"pull_request\" &&\n!body.pull_request.draft &&\n(target_branch == \"main\" \|\| target_branch == \"rh-aiq-main\") &&\n(\"src/\".pathChanged() \|\| \"metrics_lib/\".pathChanged() \|\| \"pyproject.toml\".pathChanged() \|\| \"uv.lock\".pathChanged() \|\| \"Dockerfile\".pathChanged() \|\| \".dockerignore\".pathChanged())\n" failed to evaluate: no such key: pull_request`

vbelouso · 2026-06-22T04:54:40Z

/retest vulnerability-analysis-on-pr

TamarW0 · 2026-06-23T17:56:02Z

/retest

vbelouso · 2026-06-24T11:44:51Z

@TamarW0 Could we please refrain from updating the kustomize/README.md file in this pull request or rebase it later?
I'm currently preparing major changes to this readme so it will be difficult for us to resolve conflicts.

zvigrinberg

Hi @TamarW0
There are comments that should be addressed, changed , and verify couple of things.
In addition to that, need to verify an E2E OCP deployment on new namespace, to see that nothing is missing/left off/forgotten...

zvigrinberg · 2026-06-28T12:51:07Z

      plugin_config:
        source: Product Security research
-        endpoint: CALLBACK_URL_PLACEHOLDER/api/v1/vulnerabilities/{vuln_id}/comments
+        endpoint: https://exploit-iq-client.tw-iq.svc:8443/api/v1/vulnerabilities/{vuln_id}/comments


@TamarW0 Please revert to placeholder.

zvigrinberg · 2026-06-28T12:51:19Z

  cve_http_output:
    _type: cve_http_output
-    url: CALLBACK_URL_PLACEHOLDER
+    url: https://exploit-iq-client.tw-iq.svc:8443


@TamarW0 Please revert to placeholder.

zvigrinberg · 2026-06-28T12:51:51Z


 kustomize/components/oidc-ca/*.crt

+kustomize/components/oidc-ca/*.crt


@TamarW0 Remove duplication.

zvigrinberg · 2026-06-28T12:53:35Z

    {
        "id": 1,
-        "question": "{\"image\":{\"name\":\"nvcr.io\/nvidia\/morpheus\/morpheus\",\"tag\":\"23.11-runtime\",\"source_info\":[{\"type\":\"code\",\"git_repo\":\"https:\/\/github.com\/nv-morpheus\/Morpheus.git\",\"ref\":\"v23.11.01\",\"include\":[\"**\/*.cpp\",\"**\/*.cu\",\"**\/*.cuh\",\"**\/*.h\",\"**\/*.hpp\",\"**\/*.ipynb\",\"**\/*.py\",\"**\/*Dockerfile\"],\"exclude\":[\"tests\/**\/*\"]},{\"type\":\"doc\",\"git_repo\":\"https:\/\/github.com\/nv-morpheus\/Morpheus.git\",\"ref\":\"v23.11.01\",\"include\":[\"**\/*.md\",\"docs\/**\/*.rst\"]}],\"sbom_info\":{\"_type\":\"file\",\"file_path\":\"data\/sboms\/nvcr.io\/nvidia\/morpheus\/morpheus:v23.11.01-runtime.sbom\"}},\"scan\":{\"vulns\":[{\"vuln_id\":\"GHSA-3f63-hfp8-52jq\"},{\"vuln_id\":\"CVE-2023-50782\"}]}}",
+        "question": "{\"image\":{\"name\":\"nvcr.io\/nvidia\/morpheus\/morpheus\",\"tag\":\"23.11-runtime\",\"source_info\":[{\"type\":\"code\",\"git_repo\":\"https:\/\/github.com\/nv-\/Morpheus.git\",\"ref\":\"v23.11.01\",\"include\":[\"**\/*.cpp\",\"**\/*.cu\",\"**\/*.cuh\",\"**\/*.h\",\"**\/*.hpp\",\"**\/*.ipynb\",\"**\/*.py\",\"**\/*Dockerfile\"],\"exclude\":[\"tests\/**\/*\"]},{\"type\":\"doc\",\"git_repo\":\"https:\/\/github.com\/nv-morpheus\/Morpheus.git\",\"ref\":\"v23.11.01\",\"include\":[\"**\/*.md\",\"docs\/**\/*.rst\"]}],\"sbom_info\":{\"_type\":\"file\",\"file_path\":\"data\/sboms\/nvcr.io\/nvidia\/morpheus\/morpheus:v23.11.01-runtime.sbom\"}},\"scan\":{\"vulns\":[{\"vuln_id\":\"GHSA-3f63-hfp8-52jq\"},{\"vuln_id\":\"CVE-2023-50782\"}]}}",


@TamarW0 This file is irrelevant.

zvigrinberg · 2026-06-28T12:55:49Z

-    def convert_str_to_agent_morpheus_input(input: str) -> AgentMorpheusInput:
-        logger.debug("Converting JSON string input to AgentMorpheusInput (length: %d)", len(input))
+    def convert_str_to_exploit_iq_input(input: str) -> ExploitIqInput:
+        logger.debug("Converting JSON string input to AExploitIqInput (length: %d)", len(input))


@TamarW0 You have a typo here

Suggested change

logger.debug("Converting JSON string input to AExploitIqInput (length: %d)", len(input))

logger.debug("Converting JSON string input to ExploitIqInput (length: %d)", len(input))

zvigrinberg · 2026-06-28T13:08:30Z

              containerPort: 8080
          env:
-            - name: QUARKUS_REST-CLIENT_MORPHEUS_URL
+            - name: QUARKUS_REST_CLIENT_EXPLOIT_IQ_URL


@TamarW0 There was originally a dash in here, now you replaced it with an underscore, it might break things, please verify that it's correlated with new property name.

usally the . is replaced with one underscore, and hyphen/dash replaced with double underscore (__) if the two words delimited by the dash are enclosed by a double quotes.

tested this and changed back to "-" to align to the correct property

TamarW0 · 2026-06-28T13:28:33Z

/retest

zvigrinberg

Hi @TamarW0 ,
There is still some comments, and also something not related directly:
There is the exploit-iq-models repo to install the LLM using helm chart.
need to add to a new commit explicitly the submodule ( already in .gitmodules file) and verify in the kustomize/README.md file that the paths in the helm upgrade command in the exploit-iq-models module are aligned with the module repo paths.

 git submodule add https://github.com/RHEcosystemAppEng/exploit-iq-models.git exploit-iq-models
  git commit -m "Register exploit-iq-models submodule"

zvigrinberg · 2026-06-30T06:16:17Z

@TamarW0 To check consistency of brand renaming here and in model classes, please run agent locally, and then download the openapi spec from http://localhost:26466/openapi.json, then Just beautify it, and put it updated in the PR, and then re-compare to see if all casing and brand name renames are consistent.

zvigrinberg · 2026-06-30T06:17:42Z

@TamarW0 Please check also the nginx folder in the kustomize/base/ directory, as this is what we're actually using for the deployed NginX.

I dont see anything to change there

zvigrinberg · 2026-06-30T06:24:53Z

+
+- [GnuPG](https://www.gnupg.org/download/)
+- [SOPS](https://github.com/getsops/sops/releases)
+- The private decryption key from the Bitwarden vault entry **ExploitIQ Tests Deployment Variant Private Key for Decryption**


@TamarW0 Please go to bitwarden and rename accordingly the secret entry name.

zvigrinberg · 2026-06-30T06:26:17Z

@TamarW0 This file should be restored to the main revision. shouldn't be under this PR.

Rename ExploitIQ/Agent morpheus to Exploit Intelligence

408a2b2

Rename ExploitIQ/Agent morpheus to Exploit Intelligence

ee80d00

Align tests according to the last changes

b62a4bd

Tamar Weisskopf added 4 commits June 23, 2026 21:27

Update agent image name

49e0d18

Merge branch 'main' into APPENG-5387

b807206

Update agent image name

1abea07

Revert agent image name change

2e55b5f

Tamar Weisskopf added 2 commits June 24, 2026 16:02

Remove unrelated changes

1fdc29c

Remove unrelated changes

1df818d

TamarW0 added the WIP label Jun 25, 2026

Remove unrelated changes

fd4ad14

TamarW0 removed the WIP label Jun 25, 2026

TamarW0 requested review from vbelouso and zvigrinberg June 25, 2026 09:08

Tamar Weisskopf added 2 commits June 28, 2026 03:33

Rename Agent morpheus to ExploitIQ

be688f1

revert this commit after fixing quay authentication

b1af633

TamarW0 force-pushed the APPENG-5387 branch from d333310 to b1af633 Compare June 28, 2026 06:16

Tamar Weisskopf added 5 commits June 28, 2026 10:44

skip java script tests

81e4017

merge main

4b2d280

fix image path

9f36af9

fixes

014f8a6

Merge branch 'main' into APPENG-5387

4e5c442

zvigrinberg reviewed Jun 28, 2026

View reviewed changes

fixes after review

17470b5

zvigrinberg requested changes Jun 30, 2026

View reviewed changes

few review fixes

0da6d2f


		kustomize/components/oidc-ca/*.crt

		kustomize/components/oidc-ca/*.crt

	logger.debug("Converting JSON string input to AExploitIqInput (length: %d)", len(input))
	logger.debug("Converting JSON string input to ExploitIqInput (length: %d)", len(input))

Uh oh!

Conversation

TamarW0 commented Jun 21, 2026

Uh oh!

vbelouso commented Jun 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

TamarW0 commented Jun 21, 2026

Uh oh!

exploit-iq-pac Bot commented Jun 21, 2026

Uh oh!

vbelouso commented Jun 22, 2026

Uh oh!

TamarW0 commented Jun 23, 2026

Uh oh!

vbelouso commented Jun 24, 2026

Uh oh!

zvigrinberg left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

zvigrinberg Jun 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

TamarW0 commented Jun 28, 2026

Uh oh!

zvigrinberg left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

vbelouso commented Jun 21, 2026 •

edited

Loading

zvigrinberg Jun 28, 2026 •

edited

Loading