Currently the validate target does not work.
This should fix it, it also shows some possible errors, but I do not know the process in detail, so someone else should look onto it.
The validate target no uses the vuln-flat.xml file.
Added a port-clean target to get rid of files you want not to commit.