From 3b4e755114544a89a8698a3c46aab9665aa1c805 Mon Sep 17 00:00:00 2001
From: Ronny Grobel <dgsoft.de@gmail.com>
Date: Wed, 11 Nov 2026 22:28:53 +0100
Subject: [PATCH] .gitea/workflows/build.yml aktualisiert

---
 .gitea/workflows/build.yml | 34 +++++++++++++++++++++++++++++++++-
 1 file changed, 33 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 4bf3616..6a9d7f0 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -44,5 +44,37 @@ jobs:
             git -C "$CACHE_ROOT/builder" fetch --depth 1 origin main
             git -C "$CACHE_ROOT/builder" reset --hard FETCH_HEAD
           fi
-          bash "$CACHE_ROOT/builder/scripts/run.sh"
+      - name: Load sources configuration
+        shell: bash
+        run: |
+          set -Eeuo pipefail
+
+          mkdir -p "$CACHE_ROOT"
+
+          python3 - <<'PY'
+          import os
+          import urllib.request
+
+          base = os.environ["GITEA_BASE_URL"].rstrip("/")
+          token = os.environ["GITEA_JOB_TOKEN"]
+          root = os.environ["CACHE_ROOT"]
+
+          url = (
+              f"{base}/VULN/vuln-status/"
+              "raw/branch/main/sources.json"
+          )
+
+          req = urllib.request.Request(
+              url,
+              headers={"Authorization": f"token {token}"}
+          )
+
+          with urllib.request.urlopen(req, timeout=60) as response:
+              data = response.read()
+
+          with open(f"{root}/sources.json", "wb") as f:
+              f.write(data)
+
+          print("sources.json downloaded")
+          PY