[build] read NVD apikey from property

Provide the apikey property on the command line in github action
Run github action to check depndencies on develop-6.x.x (the base branch for this).

Author: line-o

.github/workflows/ci-test.yml

@@ -20,7 +20,7 @@ jobs:
         timeout-minutes: 60
   dependencies:
     name: Dependency checks
-    if: ${{ github.event_name != 'pull_request' && github.ref == 'refs/heads/develop' }}
+    if: ${{ github.event_name != 'pull_request' && github.ref == 'refs/heads/develop-6.x.x' }}
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -30,9 +30,7 @@ jobs:
           java-version: ${{ env.DEV_JDK }}
           cache: 'maven'
       - name: OWASP dependency check
-        env:
-          NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
-        run: mvn -V -B dependency-check:check
+        run: mvn -V -B dependency-check:check -DnvdApiKey=${{ secrets.NVD_API_KEY }}
         timeout-minutes: 60
   test:
     name: ${{ matrix.os }} Test

exist-parent/pom.xml

@@ -573,7 +573,7 @@
                     <artifactId>dependency-check-maven</artifactId>
                     <version>10.0.3</version>
                     <configuration>
-                        <nvdApiKey>cb452226-8de1-4d27-9032-7c9b8741c880</nvdApiKey>
+                        <nvdApiKey>${nvdApiKey}</nvdApiKey>
                         <!-- The OSS Index Server (https://ossindex.sonatype.org) can sometimes be flaky -->
                         <ossIndexWarnOnlyOnRemoteErrors>true</ossIndexWarnOnlyOnRemoteErrors>