Threat Intel Monitor #8

	name: Threat Intel Monitor

	on:
	schedule:
	- cron: "0 9 * * 1" # Every Monday 9am UTC
	workflow_dispatch: # Manual trigger

	permissions:
	contents: write
	issues: write

	jobs:
	check-feeds:
	name: Check security blog feeds
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Restore state from threat-intel-state branch
	run: \|
	git fetch origin threat-intel-state 2>/dev/null && \
	git checkout origin/threat-intel-state -- .github/threat-intel-state.json .github/ioc-candidates 2>/dev/null \|\| true

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.12"

	- name: Install dependencies
	run: pip install feedparser

	- name: Check RSS feeds and create issues
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	REPO: ${{ github.repository }}
	run: python3 .github/scripts/threat-intel-check.py

	- name: Commit updated state
	run: \|
	git config user.name "github-actions[bot]"
	git config user.email "github-actions[bot]@users.noreply.github.com"
	git add .github/threat-intel-state.json .github/ioc-candidates
	git diff --staged --quiet && exit 0
	git commit -m "chore: update threat-intel feed state"
	git push origin HEAD:refs/heads/threat-intel-state

Navigation Menu