Collect raw data from CISA KEV and other sources and store them in git repo

[keshav-space]

Since some sources like CISA KEV restrict/limits access to many cloud service networks. We need to collect these upstream raw data and store it in git repositories. We can use GitHub workflows to collect and store the raw data in git repos.

[pombredanne]

I reached out to CISA and https://github.com/aboutcode-org/aboutcode-mirror-kev seems to be working again.
The plain https fetch does not work on our servers:

wget https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
--2024-12-02 15:37:43--  https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
Resolving www.cisa.gov (www.cisa.gov)... 2a02:26f0:7100:8a8::447a, 2a02:26f0:7100:8b3::447a, 23.67.131.29
Connecting to www.cisa.gov (www.cisa.gov)|2a02:26f0:7100:8a8::447a|:443... connected.
HTTP request sent, awaiting response... 403 Forbidden
2024-12-02 15:37:43 ERROR 403: Forbidden.

[pombredanne]

@keshav-space the fix could be as simple as pointing to https://raw.githubusercontent.com/aboutcode-org/aboutcode-mirror-kev/refs/heads/main/known_exploited_vulnerabilities.json instead of the upstream KEV, right?

[keshav-space]

the fix could be as simple as pointing to https://raw.githubusercontent.com/aboutcode-org/aboutcode-mirror-kev/refs/heads/main/known_exploited_vulnerabilities.json instead of the upstream KEV, right?

@pombredanne yes

[amanion-cisa]

I realize this issue is closed but making sure @todb-cisa knows about it.