albuch / sbt-dependency-check

SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). :rainbow:
Apache License 2.0
266 stars 35 forks source link

Update to v9.0.4 and NVD API v2. #315

Open costas80 opened 10 months ago

costas80 commented 10 months ago

Fixes Issue

Upgrades to ODC v9.0.4 and the NVD API v2 (see #314). Use without an NVD API key would otherwise be throttled (if not eventually dropped).

Description of Change

Upgraded to ODC v9.0.4 and adapted settings and documentation to match the new ODC core.

Have test cases been added to cover the new functionality?

Yes.

A new scripted test has been added that uses the NVD API key provided via system property. Note however that I did not try to adapt the other scripted tests to provide a NVD API key. In general all tests should eventually be updated to use an NVD API key that is generated for testing purposes for the project.