.github/workflows/update.yml aktualisiert

.github/workflows/update.yml

@@ -1,9 +1,9 @@
 name: CVE Synchronisation
 
 on:
-  workflow_dispatch:
   schedule:
-    - cron: "17 * * * *"
+    - cron: '17 * * * *'
+  workflow_dispatch:
 
 permissions:
   contents: write
@@ -13,42 +13,28 @@ concurrency:
   cancel-in-progress: false
 
 jobs:
-  update:
+  mirror:
     runs-on: vuln-runner
     timeout-minutes: 240
-
     steps:
       - name: Checkout
         uses: actions/checkout@v4
         with:
-          persist-credentials: true
           token: ${{ secrets.GITEA_TOKEN }}
-
+          persist-credentials: true
-      - name: Versionen prüfen
+          fetch-depth: 1
+      - name: Sync CVE using persistent local cache
+        run: python3 scripts/sync.py --since-year 2017 --cache-dir /var/cache/vuln-cve
+      - name: Validate mirror
+        run: python3 scripts/validate.py
+      - name: Push changes
         run: |
-          git --version
+          git config user.name 'Vulnerability Bot'
-          python3 --version
+          git config user.email 'vuln-bot@users.noreply.local'
-          rsync --version
+          git add -A data state
-
-      - name: CVE-Daten aktualisieren
-        run: |
-          python3 scripts/sync.py --since-year 2017
-
-      - name: Daten validieren
-        run: |
-          python3 scripts/validate.py
-
-      - name: Änderungen übertragen
-        run: |
-          git config user.name "Vulnerability Bot"
-          git config user.email "vuln-bot@apex-project.de"
-
-          git add data/ state/
-
           if git diff --cached --quiet; then
-            echo "Keine Änderungen"
+            echo 'No data changes'
             exit 0
           fi
-
+          git commit -m "CVE sync $(date -u +%Y-%m-%dT%H:%M:%SZ)"
-          git commit -m "CVE update $(date -u +%F)"
+          git push origin HEAD:main
-          git push origin HEAD:main