File size: 2,626 Bytes
d21d6b3
7dbab0b
 
 
 
 
 
 
 
a40a908
 
 
 
 
 
 
 
 
7dbab0b
 
 
 
 
 
 
d21d6b3
 
a40a908
d21d6b3
a40a908
d21d6b3
7dbab0b
d21d6b3
7dbab0b
 
 
 
 
 
a40a908
7dbab0b
a40a908
 
d21d6b3
a40a908
d21d6b3
a40a908
 
 
d21d6b3
7dbab0b
 
 
 
d21d6b3
a40a908
7dbab0b
 
 
 
a40a908
7dbab0b
d21d6b3
a40a908
 
 
 
 
 
 
 
7dbab0b
d21d6b3
a40a908
d21d6b3
a40a908
 
 
 
 
d21d6b3
a40a908
d21d6b3
a40a908
 
d21d6b3
a40a908
d21d6b3
a40a908
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
---
library_name: peft
tags:
- codeguard
- security
- qwen2.5
- lora
- code-analysis
- vulnerability-detection
- cwe
- sql-injection
- command-injection
- hardcoded-secrets
- insecure-deserialization
- xxe
- path-traversal
- ssrf
- deserialization
license: mit
base_model: Qwen/Qwen2.5-7B-Instruct
language:
- en
metrics:
- accuracy
pipeline_tag: text-generation
---

# CodeGuard Security 7B

LoRA adapter fine-tuned on Qwen 2.5 7B Instruct for **code vulnerability detection**. Trained on 32 security patterns across 8 vulnerability categories to identify and explain security flaws in source code.

## Vulnerabilities Detected

| Category | CWE | Severity |
|----------|-----|----------|
| SQL Injection | CWE-89 | Critical |
| Command Injection | CWE-78 | Critical |
| Hardcoded Secrets | CWE-798 | Critical |
| Insecure Deserialization | CWE-502 | Critical |
| XML External Entity (XXE) | CWE-611 | High |
| Path Traversal | CWE-22 | High |
| Server-Side Request Forgery | CWE-918 | High |
| Unsafe Deserialization | CWE-502 | High |

## Dataset

Trained on curated code security examples from real-world vulnerability disclosures, bug bounty reports, and secure code review patterns. Covers OWASP Top 10, CWE Top 25, and SANS 25. No synthetic or GPT-generated data.

## How to use

```python
from peft import PeftModel
from transformers import AutoModelForCausalLM, AutoTokenizer
import torch

base_model = AutoModelForCausalLM.from_pretrained(
    "Qwen/Qwen2.5-7B-Instruct",
    torch_dtype=torch.float16,
    device_map="auto"
)
model = PeftModel.from_pretrained(base_model, "NiffyHunt90/codeguard-security-7b")
tokenizer = AutoTokenizer.from_pretrained("Qwen/Qwen2.5-7B-Instruct")

code = '''
query = "SELECT * FROM users WHERE id = " + user_input
cursor.execute(query)
'''
prompt = f"Analyze this code for security vulnerabilities:\n{code}"
inputs = tokenizer(prompt, return_tensors="pt").to(model.device)
outputs = model.generate(**inputs, max_new_tokens=200)
print(tokenizer.decode(outputs[0], skip_special_tokens=True))
```

## Training

- **Base model:** Qwen 2.5 7B Instruct
- **Method:** LoRA
- **Adapter size:** 154 MB
- **Hardware:** 2x Tesla T4 (14.5GB VRAM)
- **Framework:** Unsloth + HuggingFace TRL

## Related models

- [WraithWall Core V3](https://huggingface.co/NiffyHunt90/wraithwall-core-v3) — full security operations model
- [WraithCore 7B](https://huggingface.co/NiffyHunt90/wraithcore-7b) — lightweight 616MB security adapter

## Author

**Adewale Babalola (Niffyhunt)** — Founder, WraithWall
- [niffyhunt.online](https://niffyhunt.online)
- [wraithwall.online](https://wraithwall.online)