6 Commits

Author	SHA1	Message	Date
TPTBusiness	f3a2e2b4f1	fix: Add Bandit security scanning and fix critical vulnerabilities ... - Add Bandit security scanner to requirements and pre-commit hooks - Fix CWE-22 path traversal in tarfile/zipfile extraction (3 files) * Add _safe_extract() validation in submit.py, env.py, kaggle_crawler.py * Prevents malicious archives from writing outside target directory - Fix MD5 hashlib calls with usedforsecurity=False flag (2 files) * submission_format_test.txt files for checksum validation - Configure .bandit.yml for automated security scanning * Skip known false positives: B602 (subprocess), B701 (Jinja2) - Add security runbook documentation in docs/security/ - Add pre-commit hook scripts for automated Bandit scanning All 106 backtesting and security tests pass. Security issues resolved: B201, B202, B324 (9 total fixes)	2026-04-03 11:55:05 +02:00
Xu Yang	da67df19a4	feat: add sample submission file check (#1053) ... * check sample submission & add package constraint * add trace.log into clear * change default * simplify * clear CI workspace before running * move to CI * use sudo to clean workspace * move prepare out of global var --------- Co-authored-by: Xu Yang <xuyang1@microsoft.com>	2025-07-10 18:10:32 +08:00
Xu Yang	d0afa599a7	feat: try coder on whole data (#1017) ... * commit all code * fix feedback bug * add debug mode in ds * update prompt * prioritize performance than time lit * use run instead * store running time * move all data running into running phase * fix a bug * use sample data as default --------- Co-authored-by: Xu Yang <xuyang1@microsoft.com>	2025-07-04 14:30:40 +08:00
you-n-g	a974dd9ba3	refactor: use dynamic input path and update template loader (#792) ... * refactor: use dynamic input path and update template loader * fix: update include syntax for data source in prompts.yaml * add customization path * docs: update prompts for ensemble scoring and metric direction * chore: remove obsolete data_science/share.yaml file	2025-04-16 18:11:46 +08:00
Xu Yang	f092739ab5	add rule-based eval to speed up the whole process (#768)	2025-04-08 17:27:21 +08:00
Roland Minrui	6cc1e5da3c	feat: add pipeline coder (#742) ... * init commit * limit problem numbers * ensemble lower case * add runtime and spec to coder * submission check notice * sub EDA in sample execution * avoid lightgbm * add time limit to scenario * rephrase the submission check * give positive feedback when facing warning in check * ENABLE FEEDBACK * fix feedback bug --------- Co-authored-by: Xu Yang <peteryang@vip.qq.com>	2025-04-03 13:00:11 +08:00