fedcode-next: Code pipeline and models to continuously collect related PoC for exploits of a vulnerability

[pombredanne]

To get this data, there are existing basic sources that we have already integrated. We should find more exploits in GitHub repos, and extract more data from existing sources.

[ziadhany]

This might be a good starting point:

• https://github.com/ycdxsb/PocOrExp_in_Github
• https://github.com/nomi-sec/PoC-in-GitHub

[TG1999]

• We can import these POCs, these POCs will go into a separate table ( maybe same base as exploits) and will not be stored as exploits
• We will have boolean field "is_confirmed" by default False, and once someone reviews its True

[ziadhany]

@TG1999 @pombredanne

We have two options for importing this data:

• Create our own GitHub repository and run a CI action to automatically collect PoCs from GitHub, similar to the script used here: https://github.com/ycdxsb/PocOrExp_in_Github/blob/main/exp.py#L99

• Import data from one of the existing repositories below.

let's start with a trying to import one of these repos:

• https://github.com/nomi-sec/PoC-in-GitHub
  This repository stores its data in JSON that includes details such as forks, stars, and more. However, it has no license, and the update rate is slow

• https://github.com/ycdxsb/PocOrExp_in_Github
  This repository stores its data in a README.md, so the only extractable information is the PoC Git repository URLs. It is licensed under the MIT license.

For the model design: I think we should store this in a separate table since it doesn't fit the AdvisoryExploit model:
https://github.com/aboutcode-org/vulnerablecode/blob/main/vulnerabilities/models.py#L3299C7-L3299C22

Or we could create a base model for exploits and put the common fields there.

class AdvisoryPOC(models.Model):
    advisory = models.ForeignKey(
        "AdvisoryV2",
        related_name="pocs",
        on_delete=models.CASCADE,
    )

    created_at = models.DateTimeField(null=True, blank=True)
    updated_at = models.DateTimeField(null=True, blank=True)
    url = models.URLField()

    is_confirmed = models.BooleanField(default=False)

[TG1999]

In progress here: #2024

[ziadhany]

This is done. We are now collecting POCs using this PR:

See:

• Add GitHub PoC collector #2024

Pipeline logs:

Improving data using enhance_with_github_poc
INFO 2026-05-15 07:33:00.709448 UTC Pipeline [GithubPocsImproverPipeline] starting
INFO 2026-05-15 07:33:00.709741 UTC Step [clone_repo] starting
INFO 2026-05-15 07:33:00.709885 UTC Cloning `git+https://github.com/nomi-sec/PoC-in-GitHub`
INFO 2026-05-15 07:33:16.588596 UTC Step [clone_repo] completed in 16 seconds
INFO 2026-05-15 07:33:16.588779 UTC Step [collect_and_store_exploits] starting
INFO 2026-05-15 07:33:16.654331 UTC Enhancing the vulnerability with 8,698 exploit records
INFO 2026-05-15 07:33:16.735402 UTC Advisory CVE-2016-8863 not found.
 2026-05-15 07:34:08.632171 UTC Advisory CVE-2021-46381 not found.
INFO 2026-05-15 07:34:08.633544 UTC Advisory CVE-2021-40492 not found.
INFO 2026-05-15 07:34:08.634773 UTC Advisory CVE-2021-45745 not found.
INFO 2026-05-15 07:34:08.635955 UTC Advisory CVE-2021-35250 not found.
INFO 2026-05-15 07:34:08.699862 UTC Advisory CVE-2021-41081 not found.
INFO 2026-05-15 07:34:09.693222 UTC Advisory CVE-2021-39475 not found.
INFO 2026-05-15 07:34:09.694697 UTC Advisory CVE-2021-3972 not found.
INFO 2026-05-15 07:35:48.191062 UTC Advisory CVE-2023-31779 not found.
INFO 2026-05-15 07:35:48.204967 UTC Advisory CVE-2023-42468 not found.
....
INFO 2026-05-15 07:37:45.819911 UTC Advisory CVE-2020-27688 not found.
INFO 2026-05-15 07:37:45.820786 UTC Advisory CVE-2020-9273 not found.
INFO 2026-05-15 07:37:45.821741 UTC Advisory CVE-2020-16939 not found.
INFO 2026-05-15 07:37:45.860112 UTC Progress: 100% (8698/8698)
INFO 2026-05-15 07:37:45.861133 UTC Advisory CVE-2020-12593 not found.
INFO 2026-05-15 07:37:45.861243 UTC Successfully added 8,698 poc exploit advisory
INFO 2026-05-15 07:37:45.865813 UTC Step [collect_and_store_exploits] completed in 269 seconds (4.5 minutes)
INFO 2026-05-15 07:37:45.865879 UTC Step [clean_downloads] starting
INFO 2026-05-15 07:37:45.865913 UTC Removing cloned repository
INFO 2026-05-15 07:37:46.028995 UTC Step [clean_downloads] completed in 0 seconds
INFO 2026-05-15 07:37:46.029267 UTC Pipeline completed in 285 seconds (4.8 minutes)

Process finished with exit code 0