Skip to content

03 · Scan

NVD Mirror

Nightly local mirror of the NIST vulnerability database

  1. Code
  2. Build
  3. Scan planned
  4. Store
  5. Deploy
  6. Observe

What it does

NVD Mirror keeps a local copy of the National Vulnerability Database feed, so a vulnerability scanner can match dependencies against CVE data without calling the NVD API directly.

How it runs here

Runs in the nvd-mirror namespace with a CronJob that rebuilds the mirror on a nightly schedule, storing the feed on a 25Gi Longhorn volume and serving it behind Traefik on nvd-mirror.kei-space.com.

Connects to

Stands on its own.

Why I chose it

One nightly download serves any scanner that points at it, instead of each tool pulling the full feed and hitting NVD rate limits.