Cache OWASP database

acanda · Dec 15, 2023 · 3ae6500 · 3ae6500
1 parent da6bc8a
commit 3ae6500
Show file tree

Hide file tree

Showing 2 changed files with 43 additions and 8 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -17,6 +17,11 @@ jobs:
           java-version: 17
           distribution: 'temurin'
           cache: 'maven'
+      - name: Cache OWASP database
+        uses: actions/cache@v3
+        with:
+          path: target/owasp/data
+          key: owasp-data
       - name: Build with Maven
         env:
           NVD_API_KEY: ${{ secrets.NVD_API_KEY }}

diff --git a/pom.xml b/pom.xml
@@ -162,6 +162,22 @@
       </testResource>
     </testResources>
 
+    <pluginManagement>
+      <plugins>
+        <plugin>
+          <groupId>org.owasp</groupId>
+          <artifactId>dependency-check-maven</artifactId>
+          <version>9.0.5</version>
+          <executions>
+            <execution>
+              <goals>
+                <goal>check</goal>
+              </goals>
+            </execution>
+          </executions>
+        </plugin>
+      </plugins>
+    </pluginManagement>
 
     <plugins>
       <plugin>
@@ -296,14 +312,6 @@
           <plugin>
             <groupId>org.owasp</groupId>
             <artifactId>dependency-check-maven</artifactId>
-            <version>9.0.4</version>
-            <executions>
-              <execution>
-                <goals>
-                  <goal>check</goal>
-                </goals>
-              </execution>
-            </executions>
             <configuration>
               <nvdApiKey>${env.NVD_API_KEY}</nvdApiKey>
             </configuration>
@@ -312,6 +320,28 @@
       </build>
     </profile>
 
+    <profile>
+      <id>dependency-check-github</id>
+
+      <activation>
+        <property>
+          <name>env.CI</name>
+        </property>
+      </activation>
+
+      <build>
+        <plugins>
+          <plugin>
+            <groupId>org.owasp</groupId>
+            <artifactId>dependency-check-maven</artifactId>
+            <configuration>
+              <dataDirectory>target/owasp/data</dataDirectory>
+            </configuration>
+          </plugin>
+        </plugins>
+      </build>
+    </profile>
+
     <profile>
       <id>release</id>