chore: add dep check gradle plugin & NVD api key

coopernetes · coopernetes · commit c78abbda90f0 · 2026-03-30T08:18:40.000-04:00
diff --git a/.github/workflows/cve.yml b/.github/workflows/cve.yml
@@ -7,6 +7,8 @@ jobs:
   depcheck:
     runs-on: ubuntu-latest
     name: depecheck
+    env:
+      NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # ratchet:actions/checkout@v6
diff --git a/build.gradle b/build.gradle
@@ -1,5 +1,6 @@
 plugins {
     id 'com.diffplug.spotless' version '8.4.0' apply false
+    id 'org.owasp.dependencycheck' version '12.2.0'
 }
 
 ext {
@@ -42,4 +43,7 @@ subprojects {
             finalizedBy jacocoTestReport
         }
     }
-}
+    dependencyCheck {
+        nvd.apiKey = System.getenv("NVD_API_KEY")
+    }
+}

Original file line number	Diff line number	Diff line change
`@@ -1,5 +1,6 @@`
`1`	`1`	`plugins {`
`2`	`2`	`id 'com.diffplug.spotless' version '8.4.0' apply false`
	`3`	`+ id 'org.owasp.dependencycheck' version '12.2.0'`
`3`	`4`	`}`
`4`	`5`
`5`	`6`	`ext {`
`@@ -42,4 +43,7 @@ subprojects {`
`42`	`43`	`finalizedBy jacocoTestReport`
`43`	`44`	`}`
`44`	`45`	`}`
`45`		`-}`
	`46`	`+ dependencyCheck {`
	`47`	`+ nvd.apiKey = System.getenv("NVD_API_KEY")`
	`48`	`+ }`
	`49`	`+}`