更新: 3 个文件 - 2026-03-19 02:29:34

08-threat-intel/README.md

@@ -72,6 +72,8 @@ python3 /Users/x/websafe/scripts/lab/main.py serve-dashboard --port 8734
   - GitHub Global Advisories 在未认证状态下很容易碰到 rate limit；配置后能提高配额。
 - `NVD_API_KEY`
   - 可选，用于提高 NVD 查询配额和稳定性。
+- `WEBSAFE_HTTP_CACHE_TTL_SECONDS`
+  - 可选，控制 HTML / RSS / Atom / JSON / KEV GET 抓取缓存秒数；默认 `900`，用于降低 probe 与 ingest 的重复网络开销。
 
 本机私有环境文件：
 

08-threat-intel/source-map.yaml

@@ -2228,6 +2228,9 @@ systems:
         advisory_mode: core
         keywords: [security release, gitlab]
         max_items: 50
+        status: retired
+        retired_reason: GitLab Security Releases Atom is the official machine-readable replacement; keeping both active adds duplicate cold-start cost without added coverage.
+        replacement_sources: [GitLab Security Releases Atom]
       - name: GitLab Security Releases Atom
         kind: atom-feed
         url: https://about.gitlab.com/security-releases.xml
@@ -2275,6 +2278,9 @@ systems:
         advisory_mode: core
         keywords: [jenkins]
         max_items: 60
+        status: retired
+        retired_reason: Jenkins Security Advisories RSS is the official machine-readable replacement; keeping both active adds duplicate cold-start cost without added coverage.
+        replacement_sources: [Jenkins Security Advisories RSS]
       - name: Jenkins Security Advisories RSS
         kind: rss-feed
         url: https://www.jenkins.io/security/advisories/rss.xml
@@ -2346,6 +2352,9 @@ systems:
         advisory_mode: core
         keywords: [kibana, elastic, security]
         max_items: 60
+        status: retired
+        retired_reason: Elastic Security Announcements RSS is the official machine-readable replacement; keeping both active adds duplicate cold-start cost without added coverage.
+        replacement_sources: [Elastic Security Announcements RSS]
       - name: Elastic Security Announcements RSS
         kind: rss-feed
         url: https://discuss.elastic.co/c/announcements/security-announcements/31.rss