Fix dependency check workflow (#10494)

Fix dependency check workflow by switching to a separate cache. Signed-off-by: Steven Sheehy <[email protected]>
hiero-ledger · Feb 26, 2025 · a20596c · a20596c
1 parent 07e131f
commit a20596c
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 3 deletions.
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
@@ -27,7 +27,6 @@ jobs:
   dependencies:
     name: Dependency Check
     runs-on: hiero-mirror-node-linux-large
-    if: false # ${{ github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository }}
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
@@ -60,8 +59,6 @@ jobs:
           cache-read-only: false
 
       - name: Vulnerability check
-        env:
-          NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
         run: ./gradlew dependencyCheckAggregate
         timeout-minutes: 20
 

diff --git a/buildSrc/src/main/kotlin/common-conventions.gradle.kts b/buildSrc/src/main/kotlin/common-conventions.gradle.kts
@@ -17,4 +17,5 @@ dependencyCheck {
         experimentalEnabled = true
         golangModEnabled = false // Too many vulnerabilities in transitive dependencies currently
     }
+    nvd { datafeedUrl = "https://dependency-check.github.io/DependencyCheck_Builder/nvd_cache/" }
 }