Add NVD API key

turing85 · Mar 8, 2024 · fedd271 · fedd271
1 parent 9c89760
commit fedd271
Show file tree

Hide file tree

Showing 4 changed files with 19 additions and 2 deletions.
diff --git a/.github/actions/owasp-scan/action.yml b/.github/actions/owasp-scan/action.yml
@@ -8,6 +8,9 @@ inputs:
     description: Whether artifacts (Maven state, compiled classes and JARs) should be downloaded
     default: 'true'
     required: false
+  nvd-api-key:
+    description: The API key for the NVD database, used by the dependency-check scan plugin
+    required: true
 
 runs:
   using: composite
@@ -49,6 +52,7 @@ runs:
         mvn \
           --batch-mode \
           --define ci-owasp \
+          --define nvdApiKey=${{ inputs.nvd-api-key }} \
           package \
           dependency-check:aggregate
 

diff --git a/.github/actions/populate-cache/action.yml b/.github/actions/populate-cache/action.yml
@@ -3,6 +3,11 @@ name: Populate Cache
 description: |
   An action to populate the maven cache.
 
+inputs:
+  nvd-api-key:
+    description: The API key for the NVD database, used by the dependency-check scan plugin
+    required: true
+
 runs:
   using: composite
 
@@ -26,6 +31,7 @@ runs:
       run: |
         mvn \
           --batch-mode \
+          --define nvdApiKey=${{ inputs.nvd-api-key }} \
           go-offline:resolve-dependencies \
           dependency-check:update-only
 

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -98,6 +98,8 @@ jobs:
 
       - name: Populate Cache
         uses: ./.github/actions/populate-cache
+        with:
+          nvd-api-key: ${{ secrets.NVD_API_KEY }}
 
   build:
     runs-on: ubuntu-latest
@@ -354,4 +356,6 @@ jobs:
         uses: actions/checkout@v4
 
       - name: OWASP Scan
-        uses: ./.github/actions/owasp-scan
+        uses: ./.github/actions/owasp-scan
+        with:
+          nvd-api-key: ${{ secrets.NVD_API_KEY }}
diff --git a/.github/workflows/nightly-cve-scan.yml b/.github/workflows/nightly-cve-scan.yml
@@ -19,6 +19,8 @@ jobs:
 
       - name: Populate Cache
         uses: ./.github/actions/populate-cache
+        with:
+          nvd-api-key: ${{ secrets.NVD_API_KEY }}
 
   owasp:
     runs-on: ubuntu-latest
@@ -33,4 +35,5 @@ jobs:
       - name: OWASP Scan
         uses: ./.github/actions/owasp-scan
         with:
-          download-artifacts: false
+          download-artifacts: false
+          nvd-api-key: ${{ secrets.NVD_API_KEY }}