Bump github/codeql-action from 3.26.4 to 3.26.5 #65

	name: VDR Creation

	on:
	workflow_dispatch:
	push:
	branches: [ main ]
	pull_request: # prs don't get secrets, but the API works (albeit 10x slower) without the api key
	branches: [ main ]


	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7

	- name: Set up Python 3.10
	uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
	with:
	python-version: "3.10"

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	if [ -f requirements.txt ]; then pip install -r requirements.txt; fi

	- name: Download ojvg
	env:
	NIST_NVD_TOKEN: ${{ secrets.NIST_NVD_TOKEN }}
	run: \|
	mkdir -p data
	python3 ojvg_download.py
	python3 ojvg_convert.py
	- name: Upload data directory (for debugging/introspection)
	uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
	with:
	name: data directory
	path: data
	- name: Upload final vdr
	uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
	with:
	name: final vdr
	path: data/vdr.json

Provide feedback