From c90f6770d829e961a41272be4eb699ee3f099b08 Mon Sep 17 00:00:00 2001 From: Ulli Hafner Date: Sat, 5 Oct 2024 19:11:18 +0200 Subject: [PATCH] Enable OWASP dependency check. --- .github/workflows/quality-monitor.yml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/quality-monitor.yml b/.github/workflows/quality-monitor.yml index 471fe0f..6de48e6 100644 --- a/.github/workflows/quality-monitor.yml +++ b/.github/workflows/quality-monitor.yml @@ -24,10 +24,16 @@ jobs: uses: stCarolas/setup-maven@v5 with: maven-version: 3.9.9 + - name: Cache the NVD database + uses: actions/cache@v4 + with: + path: ~/.m2/repository/org/owasp/dependency-check-data + key: dependency-check - name: Build with Maven env: BROWSER: chrome-container - run: mvn -V --color always -ntp clean verify -Ppit -Pci | tee maven.log + NVD_API_KEY: ${{ secrets.NVD_API_KEY }} + run: mvn -V --color always -ntp clean verify -Ppit -Pci -Powasp | tee maven.log - name: Extract pull request number uses: jwalton/gh-find-current-pr@v1 id: pr