vuln-list-update/.github/workflows/k8s.yml

name: Update vuln-list-k8s repo
on:
  schedule:
  - cron: "0 */6 * * *"
  workflow_dispatch:

jobs:
  update:
    name: Update vuln-list-k8s
    runs-on: ubuntu-latest
    env:
      GITHUB_TOKEN: ${{ secrets.ORG_REPO_TOKEN }}
      VULN_LIST_DIR: "vuln-list-k8s"
      REPOSITORY_OWNER: ${{ github.repository_owner }}
    steps:
    - name: Check out code
      uses: actions/checkout@v4

    - name: Set up Go
      uses: actions/setup-go@v5
      with:
        go-version-file: go.mod

    - name: Check out vuln-list-k8s repo
      uses: actions/checkout@v4
      with:
        repository: ${{ env.REPOSITORY_OWNER }}/${{ env.VULN_LIST_DIR }}
        token: ${{ secrets.ORG_REPO_TOKEN }}
        path: ${{ env.VULN_LIST_DIR }}

    - name: Setup github user email and name
      run: |
        git config --global user.email "action@github.com"
        git config --global user.name "GitHub Action"

    - name: Compile vuln-list-update
      run: go build -o vuln-list-update .

    - if: always()
      name: K8s official vulnerability advisory
      run: ./scripts/create_pr.sh k8s