feat(ci): add mitre-attack, mitre-capec, mitre-cwe#141
Conversation
Enable extract / backup / gc / truncate / restore for the three new extracted MITRE datasources, and add them to db-main / db-nightly so the assembled vuls2 DB now carries ATT&CK / CAPEC / CWE alongside mitre-v5. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
There was a problem hiding this comment.
Pull request overview
This PR expands the CI orchestration so three new extracted MITRE datasources (ATT&CK, CAPEC, CWE) are treated as first-class extracted images across the lifecycle (extract, backup, gc, truncate, restore) and are included in the DB assembly inputs.
Changes:
- Add
vuls-data-extracted-mitre-{attack,capec,cwe}to thedb-main.mk/db-nightly.mkbuild inputs. - Enable extract pipelines for
mitre-{attack,capec,cwe}inextract-main.ymlandextract-all.yml. - Extend operational maintenance workflows (backup/gc/truncate/restore matrices and allowlists) to include the three new extracted tags.
Reviewed changes
Copilot reviewed 12 out of 12 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
db-nightly.mk |
Adds the new extracted MITRE tags to the nightly DB build inputs. |
db-main.mk |
Adds the new extracted MITRE tags to the main DB build inputs. |
.github/workflows/truncate.yml |
Adds new extracted tags to the workflow_dispatch tag options list. |
.github/workflows/truncate-extracted.yml |
Adds new MITRE targets to the truncation matrix that runs after Extract All. |
.github/workflows/restore-all.yml |
Adds new extracted tags to the restore-all matrix. |
.github/workflows/gc.yml |
Adds new extracted tags to the workflow_dispatch tag options list. |
.github/workflows/gc-extracted.yml |
Adds new extracted tags to the GC Extracted matrix include list. |
.github/workflows/extract-main.yml |
Enables mitre-attack, mitre-capec, and mitre-cwe as selectable extract targets. |
.github/workflows/extract-all.yml |
Enables the three MITRE targets in both main and nightly extract matrices. |
.github/workflows/backup-weekly.yml |
Adds new extracted tags to the weekly backup matrix. |
.github/workflows/backup-monthly.yml |
Adds new extracted tags to the monthly backup matrix. |
.github/workflows/backup-daily.yml |
Adds new extracted tags to the daily backup matrix. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| $(MAKE) -f ${MAKEFILE} db-add REPO=vuls-data-extracted-mitre-attack BRANCH=${BRANCH} DBTYPE=${DBTYPE} DBPATH=${DBPATH} | ||
| $(MAKE) -f ${MAKEFILE} db-add REPO=vuls-data-extracted-mitre-capec BRANCH=${BRANCH} DBTYPE=${DBTYPE} DBPATH=${DBPATH} | ||
| $(MAKE) -f ${MAKEFILE} db-add REPO=vuls-data-extracted-mitre-cwe BRANCH=${BRANCH} DBTYPE=${DBTYPE} DBPATH=${DBPATH} |
There was a problem hiding this comment.
PR description says the assembled vuls2 DB will carry ATT&CK/CAPEC/CWE alongside mitre-v5, but db-build here only adds the three new MITRE datasources and still does not add vuls-data-extracted-mitre-v5. If mitre-v5 is intended to be part of the assembled DB, add it to this list; otherwise, please adjust the PR description to avoid the mismatch.
| $(MAKE) -f ${MAKEFILE} db-add REPO=vuls-data-extracted-mitre-attack BRANCH=${BRANCH} DBTYPE=${DBTYPE} DBPATH=${DBPATH} | ||
| $(MAKE) -f ${MAKEFILE} db-add REPO=vuls-data-extracted-mitre-capec BRANCH=${BRANCH} DBTYPE=${DBTYPE} DBPATH=${DBPATH} | ||
| $(MAKE) -f ${MAKEFILE} db-add REPO=vuls-data-extracted-mitre-cwe BRANCH=${BRANCH} DBTYPE=${DBTYPE} DBPATH=${DBPATH} |
There was a problem hiding this comment.
PR description mentions the assembled vuls2 DB includes these new MITRE datasources alongside mitre-v5, but db-build here does not add vuls-data-extracted-mitre-v5 (only attack/capec/cwe). If mitre-v5 should be included in the nightly assembled DB, add it to this list; otherwise update the PR description to match what is actually built.
Enable extract / backup / gc / truncate / restore for the three new extracted MITRE datasources, and add them to db-main / db-nightly so the assembled vuls2 DB now carries ATT&CK / CAPEC / CWE alongside mitre-v5.