From 3ae65005851f4474854926b606f24f90658f5ddf Mon Sep 17 00:00:00 2001
From: Philip Graf <git@acanda.ch>
Date: Fri, 15 Dec 2023 11:53:16 +0100
Subject: [PATCH] Cache OWASP database

---
 .github/workflows/build.yaml |  5 ++++
 pom.xml                      | 46 +++++++++++++++++++++++++++++-------
 2 files changed, 43 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 5bd3b6e..b833b2f 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -17,6 +17,11 @@ jobs:
           java-version: 17
           distribution: 'temurin'
           cache: 'maven'
+      - name: Cache OWASP database
+        uses: actions/cache@v3
+        with:
+          path: target/owasp/data
+          key: owasp-data
       - name: Build with Maven
         env:
           NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
diff --git a/pom.xml b/pom.xml
index 96ed20c..260f1b0 100644
--- a/pom.xml
+++ b/pom.xml
@@ -162,6 +162,22 @@
       </testResource>
     </testResources>
 
+    <pluginManagement>
+      <plugins>
+        <plugin>
+          <groupId>org.owasp</groupId>
+          <artifactId>dependency-check-maven</artifactId>
+          <version>9.0.5</version>
+          <executions>
+            <execution>
+              <goals>
+                <goal>check</goal>
+              </goals>
+            </execution>
+          </executions>
+        </plugin>
+      </plugins>
+    </pluginManagement>
 
     <plugins>
       <plugin>
@@ -296,14 +312,6 @@
           <plugin>
             <groupId>org.owasp</groupId>
             <artifactId>dependency-check-maven</artifactId>
-            <version>9.0.4</version>
-            <executions>
-              <execution>
-                <goals>
-                  <goal>check</goal>
-                </goals>
-              </execution>
-            </executions>
             <configuration>
               <nvdApiKey>${env.NVD_API_KEY}</nvdApiKey>
             </configuration>
@@ -312,6 +320,28 @@
       </build>
     </profile>
 
+    <profile>
+      <id>dependency-check-github</id>
+
+      <activation>
+        <property>
+          <name>env.CI</name>
+        </property>
+      </activation>
+
+      <build>
+        <plugins>
+          <plugin>
+            <groupId>org.owasp</groupId>
+            <artifactId>dependency-check-maven</artifactId>
+            <configuration>
+              <dataDirectory>target/owasp/data</dataDirectory>
+            </configuration>
+          </plugin>
+        </plugins>
+      </build>
+    </profile>
+
     <profile>
       <id>release</id>