# vuln-rocky

Official security advisory raw-data mirror for Rocky Linux.

## Gitea Runner
`runs-on: vulnerability`; shared persistent volume `/vuln-cache/vuln-rocky`. Single lock in `scripts/run-cached.sh`.

## Workflow
Runs every 6 hours; see `.gitea/workflows/update.yml`.

## Source
Rocky Linux Apollo v2 API. Paginated sweep with detail fetch (RPM information); process 20 pages of 100 advisories per run by default, checkpoint state/sync.json. Does not infer deletions from missing entries.

## Limitations
Production full sync has not been tested. Raw data must be normalized for accurate package matching.