GH workflow updates (#6541)

.github/workflows/cve-annotate.yml

@@ -4,27 +4,27 @@ on:
   push:
     branches:
       - main
+    paths:
+      - 'cves/**.yaml'
   workflow_dispatch:
 
 jobs:
   docs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
+        with: 
+          fetch-depth: 0
 
-      - name: Get Github tag
-        id: meta
-        run: |
-          curl --silent "https://api.github.com/repos/projectdiscovery/nuclei/releases/latest" | jq -r .tag_name | xargs -I {} echo TAG={} >> $GITHUB_OUTPUT
+      - name: Set up Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: 1.19
+          check-latest: true
+          cache: true
 
-      - name: Setup CVE annotate
-        if: steps.meta.outputs.TAG != ''
-        env:
-          VERSION: ${{ steps.meta.outputs.TAG }}
-        run: |
-          wget -q https://github.com/projectdiscovery/nuclei/releases/download/${VERSION}/cve-annotate.zip
-          sudo unzip cve-annotate.zip -d /usr/local/bin
-        working-directory: /tmp
+      - name: cve-annotate install
+        run: go install -v github.com/projectdiscovery/nuclei/v2/cmd/cve-annotate@latest
 
       - name: Generate CVE Annotations
         id: cve-annotate

.github/workflows/new-templates.yml

@@ -4,6 +4,8 @@ on:
   push:
     branches:
       - main
+    paths:
+      - '**.yaml'
   workflow_dispatch:
 
 jobs:

.github/workflows/syntax-checking.yml

@@ -2,6 +2,8 @@ name: ❄️ YAML Lint
 
 on:
   pull_request:
+    paths:
+      - '**.yaml'
   workflow_dispatch:
 
 jobs:

.github/workflows/template-checksum.yml

@@ -11,9 +11,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master
-      - uses: actions/setup-go@v2
-        with: 
-          go-version: 1.18
+      - name: Set up Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: 1.19
+          check-latest: true
+          cache: true
 
       - name: install checksum generator
         run: |

.github/workflows/template-db-indexer.yml

@@ -4,15 +4,20 @@ on:
   push:
     branches:
       - main
+    paths:
+      - '**.yaml'
   workflow_dispatch:
 
 jobs:
   index:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-go@v2
+      - name: Set up Go
+        uses: actions/setup-go@v3
         with:
           go-version: 1.19
+          check-latest: true
+          cache: true
 
       - name: Installing Indexer
         run: |

.github/workflows/template-validate.yml

@@ -2,26 +2,26 @@ name: 🛠 Template Validate
 
 on:
   pull_request:
+    paths:
+      - '**.yaml'
 
 jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
+        with: 
+          fetch-depth: 0
 
-      - name: Get Github tag
-        id: meta
-        run: |
-          curl --silent "https://api.github.com/repos/projectdiscovery/nuclei/releases/latest" | jq -r .tag_name | xargs -I {} echo TAG={} >> $GITHUB_OUTPUT
+      - name: Set up Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: 1.19
+          check-latest: true
+          cache: true
 
-      - name: Setup Nuclei
-        if: steps.meta.outputs.TAG != ''
-        env:
-          VERSION: ${{ steps.meta.outputs.TAG }}
-        run: |
-          wget -q https://github.com/projectdiscovery/nuclei/releases/download/${VERSION}/nuclei_${VERSION:1}_linux_amd64.zip
-          sudo unzip nuclei*.zip -d /usr/local/bin
-        working-directory: /tmp
+      - name: nuclei install
+        run: go install -v github.com/projectdiscovery/nuclei/v2/cmd/nuclei@latest
 
       - name: Template Validation
         run: |

.github/workflows/templates-stats.yml

@@ -13,9 +13,13 @@ jobs:
       - uses: actions/checkout@v3
         with: 
           fetch-depth: 0
-      - uses: actions/setup-go@v2
-        with: 
-          go-version: 1.18
+
+      - name: Set up Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: 1.19
+          check-latest: true
+          cache: true
 
       - name: Installing Template Stats
         run: |