-
-
Notifications
You must be signed in to change notification settings - Fork 2
45 lines (35 loc) · 1.15 KB
/
build-db.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
name: Build Vulnerability Database
# Controls when the workflow will run
on:
schedule:
- cron: '0 0 * * 0'
# Allows you to run this workflow manually from the Actions tab
workflow_dispatch:
# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
ci:
# The type of runner that the job will run on
runs-on: ubuntu-latest
container:
image: ghcr.io/kreatolinux/builder:latest
options: --privileged
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Update cache on every commit
uses: actions/cache@v4
with:
path: /var/cache/kpkg/archives
key: binary-cache-${{ github.run_id }}
restore-keys: |
binary-cache
- name: build audit database (amd64)
run: |
IS_ACTIONS=y sh $GITHUB_WORKSPACE/scripts/build-ci.sh init
export PATH=$PATH:$HOME/.nimble/bin
make deps kpkg
./out/kpkg audit --fetch --fetchBinary=false
- uses: actions/upload-artifact@v4
with:
name: vulndb
path: /var/cache/kpkg/vulns.db