Range-diff !297

back to !297 ci: run vuln and sonar nightly, not on every push