Cve/researcher

Daily CVE research pipeline — queries NVD, GitHub Advisory DB, and CISA KEV for HIGH/CRITICAL vulnerabilities, classifies them by real-world impact (supply-chain, infrastructure, open-source library, vendor product), and scores each for actionability to identify which CVEs warrant a dedicated swamp scanner extension.

Methods

• research — query all three CVE sources, filter by lookback window and severity, deduplicate, classify, score, and persist results with state tracking for idempotent alerting

Report

Generates a markdown report grouped by actionability:

• Extension Candidates (score 7+) — detailed with scoring breakdown
• Monitor (score 4–6) — worth tracking
• Patch Only (<4) — summary counts by classification

Workflow

Bundled cve-research workflow runs the research method and posts a rich Discord embed summary via @keeb/discord. Designed to run daily in a GitHub Action on a cron schedule.

Secrets

Both NVD_API_KEY and DISCORD_WEBHOOK_URL can be supplied as vault-backed global arguments (nvdApiKey, webhookUrl) via ${{ vault.get('<vault>', '<key>') }} expressions, or as plain environment variables as a fallback.