CISA KEV #857
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CISA KEV | |
| on: | |
| workflow_dispatch: | |
| schedule: | |
| - cron: '0 6,15 * * 1,2,3,4,5' | |
| jobs: | |
| CISA-KEV: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 10 | |
| env: | |
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} | |
| SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK | |
| steps: | |
| - name: Checkout repo | |
| uses: actions/checkout@v3 | |
| - name: CISA KEV | |
| run: | | |
| mv cisa-kev.csv cisa-kev-old.csv | |
| curl --silent --output cisa-kev.csv https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv | |
| echo "cisaOldVAR=$(cisa-kev-old.csv | wc -l)" >> $GITHUB_ENV | |
| echo "cisaNewVAR=$(cisa-kev.csv | wc -l)" >> $GITHUB_ENV | |
| echo "differenceVAR=$(( $cisaOldVAR - $cisaNewVAR ))" >> $GITHUB_ENV | |
| rm cisa-kev-old.csv | |
| - name: Fetch CVEs from Nuclei | |
| run: | | |
| git clone https://github.com/projectdiscovery/nuclei-templates.git | |
| find . -type f -name '*CVE-*' -exec basename {} \; > NucleiList.txt | |
| sed -i 's/.yaml//g' NucleiList.txt | |
| sort -u NucleiList.txt -o NucleiList.txt | |
| - name: Check for Nuclei and CISA KEV matches | |
| run: | | |
| grep -wof NucleiList.txt cisa-kev.csv | sort | uniq > CISA-Scannable-List.txt | |
| - name: Declare VARs | |
| run: | | |
| echo "totalVAR=$(($(wc -l < cisa-kev.csv) - 1))" >> $GITHUB_ENV | |
| echo "nucleiVAR=$(wc -l < CISA-Scannable-List.txt)" >> $GITHUB_ENV | |
| - name: VAR Output Validation | |
| run: | | |
| echo "Total Vulnerabilities: ${{ env.totalVAR }}" | |
| echo "New vulnerabilities added: ${{ env.differenceVAR }}" | |
| echo "CISA Scannable list: ${{ env.nucleiVAR }}" | |
| - name: Slack Notification | |
| if: env.differenceVAR > 0 | |
| uses: slackapi/[email protected] | |
| with: | |
| payload: | | |
| { | |
| "text": "📈 *CISA's KEV has been updated!*\n\n New vulnerabilities added: `${{ env.differenceVAR }}`\nTotal Vulnerabilities: `${{ env.totalVAR }}`\nCISA Scannable list: `${{ env.nucleiVAR }}`", | |
| "blocks": [ | |
| { | |
| "type": "section", | |
| "text": { | |
| "type": "mrkdwn", | |
| "text": "📈 *CISA's KEV has been updated!*\n\n New vulnerabilities added: `${{ env.differenceVAR }}`\nTotal Vulnerabilities: `${{ env.totalVAR }}`\nCISA Scannable list: `${{ env.nucleiVAR }}`" | |
| } | |
| } | |
| ] | |
| } | |
| - name: Commit changes | |
| run: | | |
| git config --local user.email "[email protected]" | |
| git config --local user.name "rxerium" | |
| git add . | |
| git commit -m "CISA KEV Updates" -a || true | |
| git push |