更新: 4 个文件 - 2026-03-18 18:54:21

08-threat-intel/source-map.yaml

@@ -6,19 +6,24 @@ systems:
     tier: history-full
     advisory_modes: [core, plugin]
     official_sources:
-      - name: WordPress Security News
+      - name: WordPress Security News RSS
-        kind: html-links
+        kind: rss-feed
-        url: https://wordpress.org/news/category/security/
+        url: https://wordpress.org/news/category/security/feed/
         confidence: official
         advisory_mode: core
         keywords: [wordpress, security, release]
         max_items: 40
+        request_policy:
+          user_agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36
       - name: NVD WordPress
         kind: nvd-search
         keyword: WordPress
         confidence: official
         advisory_mode: core
         results_per_page: 50
+        status: retired
+        retired_reason: WordPress official RSS plus ecosystem plugin intelligence cover active collection with lower cold-start latency and lower public-search dependence than NVD.
+        replacement_sources: [WordPress Security News RSS, Wordfence Vulnerability Database, WPScan Vulnerability Database]
     ecosystem_sources:
       - name: Wordfence Vulnerability Database
         kind: html-links

scripts/intel/config.py

@@ -33,7 +33,7 @@ SOURCE_BUCKETS = ("official_sources", "ecosystem_sources", "research_sources")
 MACHINE_READABLE_SOURCE_KINDS = {"ghsa-global", "osv-batch", "nvd-search", "kev-json", "json-feed", "rss-feed", "atom-feed"}
 
 DEFAULT_REQUEST_POLICY = {
-    "user_agent": "python-requests/2.31.0",
+    "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36",
     "accept": "",
     "timeout_seconds": 30,
     "verify_tls": True,

scripts/intel/http_client.py

@@ -9,7 +9,7 @@ from intel.config import DEFAULT_HEALTH_POLICY, DEFAULT_REQUEST_POLICY
 
 
 DEFAULT_TIMEOUT = 30
-DEFAULT_USER_AGENT = "python-requests/2.31.0"
+DEFAULT_USER_AGENT = str(DEFAULT_REQUEST_POLICY.get("user_agent") or "Mozilla/5.0")
 
 
 def _request_policy(source: Dict[str, Any] | None = None) -> Dict[str, Any]: