Skip to content

Remove 'ofelia' dependency and introduce a way for kepler to propagate periodic CVE updates by itself #34

@dommyrock

Description

@dommyrock

Right now we depend on ofelia (A docker job scheduler (aka. crontab for docker) ) to schedule the updating of CVE'S into db

It is tied to ofelia.ini config file which describes what commands are triggered on what schedule.

[job-exec "kepler-update-nist"]
schedule = @every 3h
command = /usr/local/bin/kepler import_nist recent --data /tmp --refresh
container =	kepler
no-overlap = true

[job-exec "kepler-update-npm"]
schedule = @every 3h
command = /usr/local/bin/kepler import_npm --recent --data /tmp
container =	kepler
no-overlap = true

This job could be done by the kepler process instead .

We should introduce a separate 'workflow' that periodically checks for CVE updates.
This workflow / code would be a separate from initial bulk_insert one .

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions