Update OWASP dependency check plugin to version 9.0.7 using NVD API Key

siemens / cmp-ra-component

A CMP Registration Authority (RA)

Apache License 2.0

3 stars 5 forks source link

Update OWASP dependency check plugin to version 9.0.7 using NVD API Key #80

Closed kiron-mx closed 8 months ago

kiron-mx commented 9 months ago

Description

Upgraded version of dependency-check from v.8.4.3 to v.9.0.4 in pom.xml
Added NVD_API_KEY to GitHub Actions workflow

Motivation and Context

Upgrading to 9.0.0 or later is mandatory; previous versions of dependency-check utilize the NVD data feeds which will be deprecated on Dec 15th, 2023. Versions earlier then 9.0.0 are no longer supported and could fail to work after Dec 15th, 2023. (see: Upgrade notice)

sonarcloud[bot] commented 8 months ago

Quality Gate passed

Kudos, no new issues were introduced!

0 New issues
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud