Bump actions/checkout from 4.1.5 to 4.1.6 #22

	name: VDR Creation

	on:
	workflow_dispatch:
	push:
	branches: [ main ]
	pull_request: # prs don't get secrets, but the API works (albeit 10x slower) without the api key
	branches: [ main ]


	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6

	- name: Set up Python 3.10
	uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
	with:
	python-version: "3.10"

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	if [ -f requirements.txt ]; then pip install -r requirements.txt; fi

	- name: Download ojvg
	env:
	NIST_NVD_TOKEN: ${{ secrets.NIST_NVD_TOKEN }}
	run: \|
	mkdir -p data
	python3 ojvg_download.py
	python3 ojvg_convert.py
	- name: Upload data directory (for debugging/introspection)
	uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
	with:
	name: data directory
	path: data
	- name: Upload final vdr
	uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
	with:
	name: final vdr
	path: data/vdr.json

Provide feedback