Right now we depend on ofelia (A docker job scheduler (aka. crontab for docker) ) to schedule the updating of CVE'S into db
It is tied to ofelia.ini config file which describes what commands are triggered on what schedule.
[job-exec "kepler-update-nist"]
schedule = @every 3h
command = /usr/local/bin/kepler import_nist recent --data /tmp --refresh
container = kepler
no-overlap = true
[job-exec "kepler-update-npm"]
schedule = @every 3h
command = /usr/local/bin/kepler import_npm --recent --data /tmp
container = kepler
no-overlap = true
This job could be done by the kepler process instead .
We should introduce a separate 'workflow' that periodically checks for CVE updates.
This workflow / code would be a separate from initial bulk_insert one .