Update patterns #19
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Update patterns | |
| on: | |
| schedule: | |
| - cron: '0 0 * * *' # Run daily at midnight UTC | |
| workflow_dispatch: # Allow manual trigger | |
| jobs: | |
| update-owasp-waf: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: 🚚 Checkout Repository | |
| uses: actions/checkout@v3 | |
| with: | |
| fetch-depth: 0 # Full history to avoid shallow clone issues | |
| - name: ⚙️ Set Up Python | |
| uses: actions/setup-python@v4 | |
| with: | |
| python-version: '3.11' | |
| - name: 📦 Cache Python Packages | |
| id: cache-pip | |
| uses: actions/cache@v3 | |
| with: | |
| path: ~/.cache/pip | |
| key: ${{ runner.os }}-pip-${{ hashFiles('**/requirements.txt') }} | |
| restore-keys: | | |
| ${{ runner.os }}-pip- | |
| - name: 📥 Install Dependencies | |
| if: steps.cache-pip.outputs.cache-hit != 'true' | |
| run: | | |
| python -m pip install --upgrade pip | |
| pip install -r requirements.txt | |
| continue-on-error: false # Fail the workflow if dependencies fail to install | |
| - name: 🕷️ Run OWASP Scraper | |
| run: | | |
| python owasp.py | |
| continue-on-error: false | |
| - name: 🔄 Convert OWASP to Caddy WAF | |
| run: | | |
| python owasp2caddy.py | |
| continue-on-error: false | |
| - name: 🔄 Convert OWASP to Nginx WAF | |
| run: | | |
| python owasp2nginx.py | |
| continue-on-error: false | |
| - name: 🔄 Convert OWASP to Apache WAF | |
| run: | | |
| python owasp2apache.py | |
| continue-on-error: false | |
| - name: 🔄 Convert OWASP to Traefik WAF | |
| run: | | |
| python owasp2traefik.py | |
| continue-on-error: false | |
| - name: 🔄 Convert OWASP to HAProxy WAF | |
| run: | | |
| python owasp2haproxy.py | |
| continue-on-error: false | |
| - name: 🔄 Generate Bad Bot Blockers | |
| run: | | |
| python badbots.py | |
| continue-on-error: false | |
| # Ensure conf files are pushed even if no changes detected | |
| - name: 🚀 Commit and Push Caddy and Nginx WAF Configs | |
| run: | | |
| git config user.name "github-actions[bot]" | |
| git config user.email "github-actions[bot]@users.noreply.github.com" | |
| git add . | |
| git commit -m "Update: [$(date)]" || echo "No changes to commit" | |
| git push | |
| continue-on-error: true # Continue even if no changes are made | |
| - name: 🧹 Cleanup Cache (Optional) | |
| run: | | |
| rm -rf ~/.cache/pip | |
| if: always() # Run this step even if previous steps fail | |
| - name: 🚨 Notify on Failure (Optional) | |
| if: failure() | |
| run: | | |
| echo "🚨 Workflow failed! Please investigate." | |
| # Slack or email notification logic (add webhook or SMTP integration here) |