Skip to content

FIX improve logging in red teaming orchestrators and usage in How-to guide#111

Merged
romanlutz merged 10 commits intomicrosoft:mainfrom
romanlutz:romanlutz/rto_logging_and_example_improvement
Mar 21, 2024
Merged

FIX improve logging in red teaming orchestrators and usage in How-to guide#111
romanlutz merged 10 commits intomicrosoft:mainfrom
romanlutz:romanlutz/rto_logging_and_example_improvement

Conversation

@romanlutz
Copy link
Copy Markdown
Contributor

Description

Adding extra context to the logged messages to avoid confusion. This helped me while debugging it earlier today. Additionally, I've found the changes to the metaprompt in the how-to guide to be useful as the conversation becomes a lot more interesting.

Tests

  • no new tests required
  • new tests added
  • existing tests adjusted

Documentation

  • no documentation changes needed
  • documentation added or edited
  • example notebook added or updated

Comment thread pyrit/orchestrator/red_teaming_orchestrator.py Outdated
Copy link
Copy Markdown
Contributor

@cseifert1 cseifert1 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thank you for changing logger.log throughout the code base. Love how we are consistent ensuring clean and beautiful code.

Comment thread pyrit/orchestrator/red_teaming_orchestrator.py
@romanlutz romanlutz merged commit a497651 into microsoft:main Mar 21, 2024
@romanlutz romanlutz deleted the romanlutz/rto_logging_and_example_improvement branch May 19, 2024 03:46
romanlutz added a commit to romanlutz/PyRIT that referenced this pull request Apr 12, 2026
Direct dependencies:
- pypdf: >=6.8.0 -> >=6.10.0 (3 alerts: path injection, infinite loop, inefficient decoding)
- tinytag: >=2.1.1 -> >=2.2.1 (1 alert: DoS via SYLT frame parsing)

Optional dependencies (gcg/all):
- mlflow: >=2.22.0 -> >=3.11.1 (8 alerts: command injection, path traversal, auth bypass)

Transitive dependency constraints (tool.uv):
- aiohttp: >=3.13.4 (10 alerts: SSRF, header injection, DoS, memory issues)
- cryptography: >=46.0.5 -> >=46.0.7 (2 alerts: buffer overflow, DNS enforcement)
- requests: >=2.33.0 (1 alert: insecure temp file reuse)
- PyJWT: >=2.12.0 (1 alert: unknown crit header extensions)
- Pygments: >=2.20.0 (1 alert: ReDoS via GUID matching)

Frontend:
- axios: 1.14.0 -> 1.15.0 (1 alert: SSRF via NO_PROXY bypass)

Remaining alerts have no fix available (mlflow microsoft#92/microsoft#109/microsoft#111, lupa, diskcache).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants