Index verified advisory PoCs and expand CVSS sources

.github/workflows/sync_metadata.yml

@@ -7,7 +7,7 @@ on:
   workflow_dispatch:
     inputs:
       full:
-        description: Rebuild every metadata year from NVD
+        description: Rebuild NVD and the reviewed GitHub advisory cache
         required: false
         default: false
         type: boolean
@@ -31,7 +31,9 @@ jobs:
         with:
           python-version: '3.13'
 
-      - name: Pull CVSS and advisory metadata from NVD
+      - name: Pull CVSS, advisory and advisory PoC metadata
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
         run: |
           if [ "${{ github.event.schedule }}" = "10 3 * * 0" ] || [ "${{ inputs.full }}" = "true" ]; then
             python3 scripts/sync_cve_metadata.py --full
@@ -51,7 +53,14 @@ jobs:
         run: |
           git config user.name 'CVE-BOT'
           git config user.email '[email protected]'
-          git add -- index/metadata/ index/kev.json
+          git add -- \
+            cves/ \
+            index/cve_dates.json \
+            index/cve_record_state.json \
+            index/github_advisories.json \
+            index/kev.json \
+            index/metadata/ \
+            index/references.txt
 
           if git diff --cached --quiet; then
             echo "No changes to commit"