From 453ac4cff925985052b56ab14967b382d34940a5 Mon Sep 17 00:00:00 2001 From: Manfred Hanke <Manfred.Hanke@tngtech.com> Date: Fri, 1 Dec 2023 16:34:49 +0100 Subject: [PATCH 1/2] use NVD API Key cf. https://nvd.nist.gov/general/news/API-Key-Announcement Signed-off-by: Manfred Hanke <Manfred.Hanke@tngtech.com> --- .github/workflows/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index f3b1e4c..c81178f 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -40,4 +40,4 @@ jobs: - name: Checkout uses: actions/checkout@v4 - name: Check dependencies - run: ./mvnw --batch-mode --no-transfer-progress -e dependency-check:check + run: ./mvnw --batch-mode --no-transfer-progress -e dependency-check:check -DnvdApiKey='${{ secrets.NVD_API_KEY }}' From 70d099c5c348bd94ae51d6b2819239b8f5d85c32 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 1 Dec 2023 13:44:27 +0000 Subject: [PATCH 2/2] chore(deps): update dependency org.owasp:dependency-check-maven to v9 Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 3785f74..c7548e0 100644 --- a/pom.xml +++ b/pom.xml @@ -83,7 +83,7 @@ <maven-compiler-plugin.version>3.11.0</maven-compiler-plugin.version> <jacoco-maven-plugin.version>0.8.11</jacoco-maven-plugin.version> <maven-surefire-plugin.version>3.2.2</maven-surefire-plugin.version> - <dependency-check-maven.version>8.4.3</dependency-check-maven.version> + <dependency-check-maven.version>9.0.4</dependency-check-maven.version> <maven-source-plugin.version>3.3.0</maven-source-plugin.version> <maven-javadoc-plugin.version>3.6.3</maven-javadoc-plugin.version> <maven-gpg-plugin.version>3.1.0</maven-gpg-plugin.version>