42 lines
1.3 KiB
YAML
42 lines
1.3 KiB
YAML
name: Debian Security Tracker Mirror
|
|
on:
|
|
workflow_dispatch:
|
|
schedule:
|
|
- cron: "43 */6 * * *"
|
|
permissions:
|
|
contents: write
|
|
concurrency:
|
|
group: vuln-debian-mirror
|
|
cancel-in-progress: false
|
|
jobs:
|
|
mirror:
|
|
runs-on: vuln-runner
|
|
timeout-minutes: 120
|
|
steps:
|
|
- name: Sync official Debian data using persistent checkout
|
|
env:
|
|
GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
|
|
CACHE_ROOT: /var/lib/act_runner/cache/vuln-debian
|
|
REPO_URL: https://git.apex-project.de/VULN/vuln-debian.git
|
|
run: |
|
|
set -Eeuo pipefail
|
|
umask 077
|
|
mkdir -p "$CACHE_ROOT"
|
|
if [ ! -f "$CACHE_ROOT/repo/scripts/run-cached.sh" ]; then
|
|
ASKPASS="$(mktemp)"
|
|
trap 'rm -f "$ASKPASS"' EXIT
|
|
cat > "$ASKPASS" <<'EOF'
|
|
#!/bin/sh
|
|
case "$1" in
|
|
*Username*) printf 'oauth2\n' ;;
|
|
*Password*) printf '%s\n' "$GITEA_TOKEN" ;;
|
|
*) exit 1 ;;
|
|
esac
|
|
EOF
|
|
chmod 700 "$ASKPASS"
|
|
GIT_ASKPASS="$ASKPASS" GIT_TERMINAL_PROMPT=0 git clone --depth 1 --branch main "$REPO_URL" "$CACHE_ROOT/repo"
|
|
rm -f "$ASKPASS"
|
|
trap - EXIT
|
|
fi
|
|
bash "$CACHE_ROOT/repo/scripts/run-cached.sh"
|