Add task to prepopulate/pre-cache the NVD database

[sjamaan]

This makes it easier to use in a CI pipeline, especially if multiple jobs use the NVD database.

Takes care of #162

[gemini-code-assist]

Code Review

This pull request introduces a new prepopulate-db task to prepopulate the OWASP Dependency-Check database. The review feedback highlights a critical issue where unconditionally calling System/exit 0 inside the impl function halts the JVM, preventing programmatic usage (such as in a REPL or tests) and bypassing resource cleanup in the with-config block. The reviewer suggests implementing a conditional exit mechanism matching the pattern in the check task and fixing a minor typo ("Prepulating" to "Prepopulating").

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[gemini-code-assist]

Unconditionally calling System/exit 0 inside impl prevents programmatic usage of this task (e.g., from a REPL, tests, or other Clojure tools) and halts the JVM immediately. Furthermore, calling System/exit inside the with-config block prevents the finally block from executing, which means the engine's resources are not cleaned up properly.

We should introduce a conditional-exit helper that respects the :exit-after-check configuration option, matching the pattern used in nvd.task.check.

Additionally, there is a minor typo in the log message: Prepulating should be Prepopulating.

(defn conditional-exit [{:keys [exit-after-check] :as project}]
  (if exit-after-check
    (System/exit 0)
    project))

(defn impl [config-filename]
  (with-config [project config-filename]
    (println "Prepopulating database for" (-> project
                                             :title
                                             (s/trim)
                                             (str "...")
                                             (style :bright :yellow)))
    (println "  using nvd-clojure:" (:nvd-clojure @version) "and dependency-check:" (:dependency-check @version))
    (-> project
        do-updates
        conditional-exit)))

[sjamaan]

The bot has a point. The exit-after-check key does not get honored by this task, because the task isn't a "check" task. I'm not sure what to do here. There currently aren't really any tests of the tasks, anyway, so maybe it's a moot point?