auto_import.yaml

name: Auto advisory import
on:
  schedule:
  - cron: '0 * * * *'
  workflow_dispatch:
jobs:
  job:
    continue-on-error: false
    name: Auto import
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - uses: actions/setup-go@v2
      with:
        go-version: '^1.16.4'
    - run: |
        wget http://pypa-advisory-db.storage.googleapis.com/triage/pypi_links.json
        wget http://pypa-advisory-db.storage.googleapis.com/triage/pypi_versions.json
    - run: |
        wget https://storage.googleapis.com/cve-osv-conversion/nvd/nvdcve-2.0-2024.json
    - run: |
        go install github.com/google/osv/vulnfeeds/cmd/pypi@master
        pypi -false_positives triage/false_positives.yaml \
            -nvd_json nvdcve-2.0-2024.json \
            -pypi_links pypi_links.json \
            -pypi_versions pypi_versions.json \
            -out_dir vulns \
            -without_notes \
            -exclude_unbounded
        git config user.name github-actions
        git config user.email github-actions@github.com
        git add vulns
        git diff --cached
      env:
        GONOPROXY: github.com/google/osv
    - run: git diff --cached --quiet || git commit -m 'Auto import'
    - run: git push