graph_builder = StateGraph(State)
# Nodes
graph_builder.add_node("retrieve", retrieve) # Get vulnerability data
graph_builder.add_node("generate_initial", generate_initial) # Create initial report
graph_builder.add_node("extra_userinput", extra_userinput) # Get more context

# Edges
graph_builder.add_edge(START, "retrieve")
graph_builder.add_edge("retrieve", "generate_initial")
graph_builder.add_edge("generate_initial", "extra_userinput")
graph_builder.add_conditional_edges("extra_userinput", needs_more_info, ["extra_userinput", END])

def retrieve_relevant_files(repo_url: str, query: str, k: int = 5) -> List[Dict]:
 """Retrieve relevant files from the vector database based on a query."""
 vector_db = VectorDatabase()
 documents = vector_db.similarity_search(query, k=k)

 results = []
 for doc in documents:
 results.append({
 "path": doc.metadata["path"],
 "content": doc.page_content,
 "is_kubernetes": doc.metadata.get("is_kubernetes", False),
 })

 return results

apiVersion: v1
kind: Secret
metadata:
 name: database-credentials
type: Opaque
data:
 username: YWRtaW4= # "admin" in base64
 password: c3VwZXJzZWNyZXQ= # "supersecret" in base64

# HAIstings configuration for using CodeGate
self.llm = init_chat_model(
 # Using CodeGate's Muxing feature
 model="gpt-4o", # This will be routed appropriately by CodeGate
 model_provider="openai",
 # API key not needed as it's handled by CodeGate
 api_key="fake-api-key",
 # CodeGate Muxing API URL
 base_url="http://127.0.0.1:8989/v1/mux",
)

# HAIsting's Security Report

## Introduction

Good day! Arthur Hastings at your service. I've meticulously examined the vulnerability reports from your Kubernetes infrastructure and prepared a prioritized assessment of the security concerns that require your immediate attention.

## Summary

After careful analysis, I've identified several critical vulnerabilities that demand prompt remediation:

1. **example-service (internet-facing service)**
 - Critical vulnerabilities: 3
 - High vulnerabilities: 7
 - Most concerning: CVE-2023-1234 (Remote code execution)

 This service is particularly concerning due to its internet-facing nature, as mentioned in your notes. I recommend addressing these vulnerabilities with the utmost urgency.

2. **Flux (GitOps controller)**
 - Critical vulnerabilities: 2
 - High vulnerabilities: 5
 - Most concerning: CVE-2023-5678 (Git request processing vulnerability)

 As you've noted, Flux is critical to your infrastructure, and this Git request processing vulnerability aligns with your specific concerns.

## Conclusion

I say, these vulnerabilities require prompt attention, particularly the ones affecting your internet-facing services and deployment controllers. I recommend addressing the critical vulnerabilities in example-service and Flux as your top priorities.