Merge pull request #464 from ThoughtWorks-SEA/dependabot/gradle/org.o…

…wasp.dependencycheck-9.0.1 Bump org.owasp.dependencycheck from 8.4.3 to 9.0.2
thoughtworks · Dec 4, 2023 · 4bd4e52 · 4bd4e52
2 parents 3b95151 + 78e7b8c
commit 4bd4e52
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/build.gradle.kts b/build.gradle.kts
@@ -13,7 +13,7 @@ plugins {
     jacoco
     id("com.adarshr.test-logger") version "4.0.0"
     id("com.google.cloud.tools.jib") version "3.4.0"
-    id("org.owasp.dependencycheck") version "8.4.3"
+    id("org.owasp.dependencycheck") version "9.0.2"
 }
 
 group = "recce.server"
@@ -168,6 +168,7 @@ dependencyCheck {
     suppressionFile = "build-config/dependency-check-suppressions.xml"
     scanConfigurations = listOf("runtimeClasspath")
     analyzers.assemblyEnabled = false // Unneeded, and creates warning noise
+    nvd.apiKey = System.getenv("NVD_API_KEY") ?: ""
 }
 
 application {