vulnz/config.example.yaml at main · shift/vulnz · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
# vulnz-go configuration file
# Place this file at ~/.vulnz.yaml or use --config flag
#
# EU-only configuration: includes only EU CRA/NIS2 relevant providers
# covering ENISA EUVD, BSI CERT-Bund (Germany), CERT-FR/ANSSI (France),
# and the consolidated KEV dump.

log:
  level: info
  verbose: false
  slim: false
  show_timestamp: true
  show_level: true

# Workspace root directory (where all provider data is stored)
root: ./data

# Executor configuration
executor:
  max_concurrent: 4
  timeout: 30m

# Provider configurations
providers:
  # Common settings shared by all providers
  common:
    runtime:
      result_store: flat-file        # flat-file or sqlite
      existing_results: keep         # keep, delete, delete-before-write

  # EU Vulnerability Database (ENISA)
  # Source: https://euvdservices.enisa.europa.eu/api/exploitedvulnerabilities
  euvd:
    runtime:
      result_store: flat-file
      existing_results: keep

  # CVE-to-EUVD ID mapping (ENISA, updated daily at 07:00 UTC)
  # Source: https://euvdservices.enisa.europa.eu/api/dump/cve-euvd-mapping
  euvd-mapping:
    runtime:
      result_store: flat-file
      existing_results: keep

  # BSI CERT-Bund (Germany — Bundesamt fuer Sicherheit in der Informationstechnik)
  # Source: https://wid.cert-bund.de/.well-known/csaf/white/bsi-wid-white.json
  bsi-cert-bund:
    runtime:
      result_store: flat-file
      existing_results: keep

  # CERT-FR / ANSSI (France — Agence Nationale de la Securite des Systemes d'Information)
  # Source: https://www.cert.ssi.gouv.fr/feed/
  cert-fr:
    runtime:
      result_store: flat-file
      existing_results: keep

  # KEV — consolidated Known Exploited Vulnerabilities (ENISA/CISA merged dump)
  # Source: https://euvdservices.enisa.europa.eu/api/kev/dump
  kev:
    runtime:
      result_store: flat-file
      existing_results: keep