Update the embedded build platform vulnerability database:
- Run the database update:
make update-vulndb - Verify the updated database compiles correctly:
make test - Report how many CVEs were added or updated compared to the previous version
Note: This clones the CVE repository (sparse checkout) and processes CVE JSON files for GitHub Actions and GitLab CI vulnerabilities. The output is written to opa/rego/external/build_platform.rego.
Source: boostsecurityio/poutine — distributed by TomeVault.