Update blueprint to version 3

.dockerignore

@@ -0,0 +1,39 @@
+# SPDX-FileCopyrightText: Copyright (c) 2024-2025, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Exclude local virtual environment from Docker build context
+.venv/
+venv/
+env/
+ENV/
+
+# Exclude other local development files
+.vscode/
+.idea/
+*.pyc
+__pycache__/
+.pytest_cache/
+.mypy_cache/
+*.egg-info/
+dist/
+build/
+
+# Exclude temporary and cache directories
+.tmp/
+.cache/
+*.log
+
+# SSL certificates must never be baked into the image
+deploy/nginx/*.pem

.env.example

@@ -0,0 +1,3 @@
+NVIDIA_API_KEY=
+NV_BASE_URL=https://inference-api.nvidia.com/v1
+TAVILY_API_KEY=

.github/workflows/test-deploy-cve-notebook.yml

@@ -0,0 +1,122 @@
+name: Test Deploy CVE Notebook
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  run-notebook:
+    runs-on: arc-runners-org-nvidia-ai-bp-1-gpu
+    env:
+      NOTEBOOK_PATH: ./deploy/1_Deploy_CVE.ipynb
+      PYTHON_VERSION: 3.12
+    steps:
+      - name: Checkout BP repository
+        uses: actions/checkout@v3
+
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: ${{ env.PYTHON_VERSION }}
+          cache: 'pip'
+          cache-dependency-path: |
+            requirements.txt
+            **/*.ipynb
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install python-dotenv
+          pip install --upgrade pip ipython ipykernel
+          ipython kernel install --name "python3" --user
+
+          # Get System Info
+          echo "===================== System Info ====================="
+          more /etc/os-release
+          docker version
+          docker compose version
+
+      - name: Run Jupyter Notebook
+        env:
+          GHSA_API_KEY: ${{ secrets.GHSA_API_KEY }}
+          NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
+          SERPAPI_API_KEY: ${{ secrets.SERPAPI_API_KEY }}
+          NVIDIA_API_KEY: ${{ secrets.NVIDIA_API_KEY }}
+        run: |
+          OUTPUT_NOTEBOOK="result.ipynb"
+          echo "Executing notebook: $NOTEBOOK_PATH"
+          papermill "$NOTEBOOK_PATH" "$OUTPUT_NOTEBOOK" --log-output --log-level DEBUG
+
+      - name: Convert result to html format
+        if: always()
+        run: |
+          OUTPUT_NOTEBOOK="result.ipynb"
+          jupyter nbconvert --to html "$OUTPUT_NOTEBOOK"
+
+
+      - name: Run Test Code
+        if: always()
+        env:
+          TEST_DOCKER_PULL_KEY: ${{ secrets.TEST_DOCKER_PULL_KEY }}
+        run: |
+          # Check if the HTML files exist before running tests
+          if [ ! -f "./result.html" ]; then
+            echo "Warning: result.html not found"
+          fi
+
+          # Run the test and capture the exit code
+          echo "$TEST_DOCKER_PULL_KEY" |docker login nvcr.io --username  '$oauthtoken' --password-stdin
+          docker run --rm \
+            -v ./result.html:/app/input/vulnerability_analysis/Launchable-VACS-2.1.0-result.html  \
+            -v "$(pwd):/workspace" \
+            nvcr.io/rw983xdqtcdp/auto_test_team/blueprint-github-test-image:latest \
+            pytest -m vacs --disable-warnings --html=/workspace/vacs.html --self-contained-html
+
+      - name: Upload the result notebook as artifact
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: result notebook and pytest
+          path: |
+             result.html
+             vacs.html
+          retention-days: 30
+
+      - name: Set result output
+        id: set_result
+        if: always()  
+        run: |
+          echo "RESULT=$(if [ ${{ job.status }} == 'success' ]; then echo 'PASS'; else echo 'FAIL'; fi)" >> $GITHUB_OUTPUT
+
+      - name: Send mail
+        uses: dawidd6/action-send-mail@6e71c855c9a091d80a519621b9fd3e8d252ca40c
+        if: always()
+        with:
+          server_address: smtp.gmail.com
+          server_port: 587
+          username: ${{ secrets.SMTP_USERNAME }}
+          password: ${{ secrets.SMTP_PASSWORD }}
+
+          # Email details
+          subject: "QA Test Workflow Result for ${{ github.repository }}"
+          to: Github-Action-Blueprint-QA@nvidia.com
+          from: github-workflow-notification@gmail.com
+          html_body: |
+            <p>Hello,</p>
+
+            <p>The workflow for repository: <strong>${{ github.repository }}</strong> has completed.<br>
+            <strong>Result:</strong> ${{ steps.set_result.outputs.RESULT }}</p>
+
+            <p>You can review the details on GitHub:<br>
+            <a href="${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}">${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}</a></p>
+
+            <p>Thanks!</p>                

.gitignore

@@ -1,4 +1,5 @@
 ###### Place new entries directly below this line! ######
+outputs/
 
 # Ignore anything in the ./.tmp directory
 .tmp/

.gitmodules

@@ -0,0 +1,4 @@
+[submodule "aiq"]
+	path = aiq
+	url = https://github.com/NVIDIA-AI-Blueprints/aiq.git
+	branch = develop