vdr-creation.yml

name: VDR Creation

on:
  workflow_dispatch:
  push:
    branches: [ main ]
  pull_request: # prs don't get secrets, but the API works (albeit 10x slower) without the api key
    branches: [ main ]


jobs:
  build:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7

    - name: Set up Python 3.10
      uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
      with:
        python-version: "3.10"

    - name: Install dependencies
      run: |
        python -m pip install --upgrade pip
        if [ -f requirements.txt ]; then pip install -r requirements.txt; fi

    - name: Download ojvg
      env:
        NIST_NVD_TOKEN: ${{ secrets.NIST_NVD_TOKEN }}
      run: |
        mkdir -p data
        python3 ojvg_download.py
        python3 ojvg_convert.py
    - name: Upload data directory (for debugging/introspection)
      uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
      with:
        name: data directory
        path: data
    - name: Upload final vdr
      uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
      with:
        name: final vdr
        path: data/vdr.json