55 branches :
66 - main
77 schedule :
8- - cron : ' */30 * * * *'
8+ - cron : " */30 * * * *"
99 workflow_dispatch :
1010 inputs :
1111 clean :
1212 description : ' Download fresh feeds from NVD. Any value other than "false" will trigger a clean download.'
1313 required : true
14- default : ' false'
14+ default : " false"
1515
1616permissions :
1717 contents : write
2222 VULNERABILITIES_CLEAN : ${{ github.event.inputs.clean || 'false' }}
2323
2424jobs :
25- build :
25+ build :
2626 runs-on : ubuntu-latest
2727 timeout-minutes : 180
2828
65656666 with :
6767 cache : false
68- go-version : ' ^1.24.2'
68+ go-version : " ^1.24.2"
6969
7070 - name : Generate NVD Feeds
7171 run : |
8787 run : for i in {1..3}; do goval-dictionary/goval-dictionary fetch amazon 2022 --dbpath ./fleet/cvefeed/amzn_2022.sqlite3 && s=0 && break || s=$? && sleep 2; done; (exit $s)
8888 - name : Pull Amazon Linux 2023 vulnerabilities
8989 run : for i in {1..3}; do goval-dictionary/goval-dictionary fetch amazon 2023 --dbpath ./fleet/cvefeed/amzn_2023.sqlite3 && s=0 && break || s=$? && sleep 2; done; (exit $s)
90+ - name : Pull RHEL 5 vulnerabilities
91+ run : for i in {1..3}; do goval-dictionary/goval-dictionary fetch redhat 5 --dbpath ./fleet/cvefeed/rhel_05.sqlite3 && s=0 && break || s=$? && sleep 2; done; (exit $s)
92+ - name : Pull RHEL 6 vulnerabilities
93+ run : for i in {1..3}; do goval-dictionary/goval-dictionary fetch redhat 6 --dbpath ./fleet/cvefeed/rhel_06.sqlite3 && s=0 && break || s=$? && sleep 2; done; (exit $s)
94+ - name : Pull RHEL 7 vulnerabilities
95+ run : for i in {1..3}; do goval-dictionary/goval-dictionary fetch redhat 7 --dbpath ./fleet/cvefeed/rhel_07.sqlite3 && s=0 && break || s=$? && sleep 2; done; (exit $s)
96+ - name : Pull RHEL 8 vulnerabilities
97+ run : for i in {1..3}; do goval-dictionary/goval-dictionary fetch redhat 8 --dbpath ./fleet/cvefeed/rhel_08.sqlite3 && s=0 && break || s=$? && sleep 2; done; (exit $s)
98+ - name : Pull RHEL 9 vulnerabilities
99+ run : for i in {1..3}; do goval-dictionary/goval-dictionary fetch amazon 2023 --dbpath ./fleet/cvefeed/rhel_09.sqlite3 && s=0 && break || s=$? && sleep 2; done; (exit $s)
90100
91101 - name : Validate NVD Feeds
92102 run : |
95105
96106 - name : Compress Amazon Linux vulnerability sqlite files
97107 run : xz ./fleet/cvefeed/*.sqlite3
98-
108+
99109 - name : Current date
100110 id : date
101111 run : |
@@ -105,7 +115,7 @@ jobs:
105115 run : |
106116 git tag -a cve-${{ steps.date.outputs.date }} -m "release ${{ steps.date.outputs.date }}"
107117 git push origin cve-${{ steps.date.outputs.date }}
108-
118+
109119 - name : Release
110120 uses : softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15
111121 with :
0 commit comments