-
Notifications
You must be signed in to change notification settings - Fork 11
145 lines (116 loc) · 4.17 KB
/
retrieve_cve.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
name: Daily Retrieve CVE
on:
schedule:
- cron: '10 0 * * *'
workflow_dispatch: # Allows manual triggering
jobs:
retrieve_cve:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v2
- name: Set up Python
uses: actions/setup-python@v2
with:
python-version: '3.x'
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt
- name: Retrieve CVE
env:
NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
run: python retrieve_cve.py
- name: Commit and push changes
run: |
git config --global user.name "github-actions"
git config --global user.email "[email protected]"
git diff --quiet && git diff --staged --quiet || git add lastUpdate.txt
git diff --quiet && git diff --staged --quiet || git add results/new_cves.jsonl
git diff --staged --quiet || git commit -m "Retrieve new CVEs"
git push
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
retrieve_cwe:
runs-on: ubuntu-latest
needs: retrieve_cve
steps:
- name: Checkout repository
uses: actions/checkout@v2
- name: Set up Python
uses: actions/setup-python@v2
with:
python-version: '3.x'
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt
- name: Pull latest changes
run: git pull
- name: Retrieve CWE
run: python cve2cwe.py
- name: Commit and push changes
run: |
git config --global user.name "github-actions"
git config --global user.email "[email protected]"
git diff --quiet && git diff --staged --quiet || git add results/new_cves.jsonl
git diff --staged --quiet || git commit -m "Retrieve CWE from new CVEs"
git push
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
retrieve_capec:
runs-on: ubuntu-latest
needs : retrieve_cwe
steps:
- name: Checkout repository
uses: actions/checkout@v2
- name: Set up Python
uses: actions/setup-python@v2
with:
python-version: '3.x'
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt
- name: Pull latest changes
run: git pull
- name: Retrieve CAPEC
run: python cwe2capec.py
- name: Commit and push changes
run: |
git config --global user.name "github-actions"
git config --global user.email "[email protected]"
git diff --quiet && git diff --staged --quiet || git add results/new_cves.jsonl
git diff --staged --quiet || git commit -m "Retrieve CAPEC from new CVEs's CWE"
git push
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
retrieve_techniques:
runs-on: ubuntu-latest
needs: retrieve_capec
steps:
- name: Checkout repository
uses: actions/checkout@v2
- name: Set up Python
uses: actions/setup-python@v2
with:
python-version: '3.x'
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt
- name: Pull latest changes
run: git pull
- name: Retrieve TECHNIQUES
run: python capec2technique.py
- name: Commit and push changes
run: |
git config --global user.name "github-actions"
git config --global user.email "[email protected]"
git diff --quiet && git diff --staged --quiet || git add results/new_cves.jsonl
git diff --quiet && git diff --staged --quiet || git add lastUpdate.txt
git diff --quiet && git diff --staged --quiet || git add database/*.jsonl
git diff --staged --quiet || git commit -m "Retrieve new CVEs and update CVE DB"
git push
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}