We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 8a052c1 commit 0acad6aCopy full SHA for 0acad6a
.github/workflows/owasp.yml
@@ -15,7 +15,10 @@ jobs:
15
- name: Checkout repository
16
uses: actions/checkout@v4
17
18
- - run: |
+ - env:
19
+ NVD_API_KEY:
20
+ ${{ secrets.NVD_API_KEY }}
21
+ run: |
22
mvn -DskipTests install -P OWASP_CHECK
23
24
- name: Upload SARIF file
pom.xml
@@ -69,8 +69,9 @@
69
<plugin>
70
<groupId>org.owasp</groupId>
71
<artifactId>dependency-check-maven</artifactId>
72
- <version>8.2.1</version>
+ <version>11.1.1</version>
73
<configuration>
74
+ <nvdApiKeyEnvironmentVariable>NVD_API_KEY</nvdApiKeyEnvironmentVariable>
75
<suppressionFiles>
76
<suppressionFile>cve-suppression.xml</suppressionFile>
77
</suppressionFiles>
0 commit comments