Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for nvd api keys during dependency check analysis #8034

Merged
merged 2 commits into from
Apr 6, 2024

Conversation

nathanklick
Copy link
Member

Description

This pull request changes the following:

  • Adds support for setting an optional NVD API Key when running the dependency check plugin.
  • Updates the CI pipelines to provide a NVD API key.
  • Updates dependabot configuration to analyze Github Actions dependencies daily.

Signed-off-by: Nathan Klick <nathan@swirldslabs.com>
@nathanklick nathanklick changed the title ci: add support for nvd api keys during dependency check analysis Add support for nvd api keys during dependency check analysis Apr 6, 2024
Signed-off-by: Nathan Klick <nathan@swirldslabs.com>
@codecov-commenter
Copy link

codecov-commenter commented Apr 6, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 92.42%. Comparing base (a0c6c27) to head (2323305).

Additional details and impacted files
@@             Coverage Diff              @@
##               main    #8034      +/-   ##
============================================
+ Coverage     92.33%   92.42%   +0.08%     
+ Complexity     7181     4767    -2414     
============================================
  Files           893      661     -232     
  Lines         29097    21038    -8059     
  Branches       3506     2619     -887     
============================================
- Hits          26868    19445    -7423     
+ Misses         1446     1051     -395     
+ Partials        783      542     -241     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Copy link

sonarcloud bot commented Apr 6, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

@nathanklick nathanklick merged commit 018ebc2 into main Apr 6, 2024
30 checks passed
@nathanklick nathanklick deleted the nvd-token-support branch April 6, 2024 20:32
@nathanklick nathanklick added the dependencies Type: Pull requests that update a dependency file label Apr 8, 2024
@steven-sheehy steven-sheehy added this to the 0.103.0 milestone Apr 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Type: Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants