From addd273d98730041a741d3c6ab226ddbfea70767 Mon Sep 17 00:00:00 2001
From: Ronny Grobel <dgsoft.de@gmail.com>
Date: Tue, 10 Nov 2026 18:02:46 +0100
Subject: [PATCH] .github/workflows/update.yml aktualisiert

---
 .github/workflows/update.yml | 57 +++++++++++++++++++++++-------------
 1 file changed, 36 insertions(+), 21 deletions(-)

diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index fab58c4ca6..eab5dc30ce 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -1,39 +1,54 @@
-name: Sync CVE List V5
+name: CVE Synchronisation
+
 on:
-  schedule:
-    - cron: '17 * * * *'
   workflow_dispatch:
+  schedule:
+    - cron: "17 * * * *"
+
 permissions:
   contents: write
+
 concurrency:
-  group: cve-mirror
+  group: vuln-cve-update
   cancel-in-progress: false
+
 jobs:
-  mirror:
-    runs-on: [self-hosted, linux, x64, vulnerability]
+  update:
+    runs-on: vuln-runner
     timeout-minutes: 240
+
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout
+        uses: actions/checkout@v4
         with:
           persist-credentials: true
-          fetch-depth: 1
-      - name: Verify tools
+          token: ${{ secrets.GITEA_TOKEN }}
+
+      - name: Versionen prüfen
         run: |
           git --version
-          rsync --version | head -1
           python3 --version
-      - name: Download, verify, and mirror
-        run: python3 scripts/sync.py --since-year 2017
-      - name: Validate mirror
-        run: python3 scripts/validate.py
-      - name: Commit and push changed records
+          rsync --version
+
+      - name: CVE-Daten aktualisieren
         run: |
-          git config user.name 'vulnerability-bot'
-          git config user.email 'vulnerability-bot@users.noreply.github.com'
-          git add -A data state
+          python3 scripts/sync.py --since-year 2017
+
+      - name: Daten validieren
+        run: |
+          python3 scripts/validate.py
+
+      - name: Änderungen übertragen
+        run: |
+          git config user.name "Vulnerability Bot"
+          git config user.email "vuln-bot@apex-project.de"
+
+          git add data/ state/
+
           if git diff --cached --quiet; then
-            echo 'No changes'
+            echo "Keine Änderungen"
             exit 0
           fi
-          git commit -m "Sync CVE records ($(date -u +%Y-%m-%dT%H:%M:%SZ))"
-          git push origin HEAD:main
+
+          git commit -m "CVE update $(date -u +%F)"
+          git push origin HEAD:main
\ No newline at end of file