mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
6d65ae36bb
Sampling the corpus put 17% of the repositories it links to behind a 404, so readers were following links to repositories that no longer exist. The previous audit script was 630 lines, never wired to anything, and kept its state under a gitignored directory. Replace it with a check that batches repository lookups through GraphQL and removes a link only when GitHub answers NOT_FOUND for it, so a throttle or a network error can never drop one. A quarter of the corpus runs each week, which stays inside the token's hourly budget and sweeps everything within the month.
61 lines
1.2 KiB
YAML
61 lines
1.2 KiB
YAML
name: Build & Deploy CVE Radar
|
|
|
|
on:
|
|
schedule:
|
|
- cron: '20 6 * * *'
|
|
workflow_dispatch:
|
|
workflow_run:
|
|
workflows:
|
|
- Sync CVE PoCs
|
|
- Hot CVEs List
|
|
- Audit PoC Links
|
|
types:
|
|
- completed
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
permissions:
|
|
contents: read
|
|
pages: write
|
|
id-token: write
|
|
|
|
concurrency:
|
|
group: 'pages'
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
build:
|
|
if: github.event_name != 'workflow_run' || github.event.workflow_run.conclusion == 'success'
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v7
|
|
|
|
- name: Set up Python
|
|
uses: actions/setup-python@v7
|
|
with:
|
|
python-version: '3.12'
|
|
|
|
- name: Build site data
|
|
run: python3 scripts/build_site.py
|
|
|
|
- name: Configure Pages
|
|
uses: actions/configure-pages@v6
|
|
|
|
- name: Upload artifact
|
|
uses: actions/upload-pages-artifact@v5
|
|
with:
|
|
path: docs
|
|
|
|
deploy:
|
|
needs: build
|
|
runs-on: ubuntu-latest
|
|
environment:
|
|
name: github-pages
|
|
url: ${{ steps.deploy.outputs.page_url }}
|
|
steps:
|
|
- name: Deploy to GitHub Pages
|
|
id: deploy
|
|
uses: actions/deploy-pages@v5
|