[bugfix] Fix dependency-check-maven ossindex access in CI

Author: adamretter

.circleci/config.yml

@@ -307,6 +307,24 @@ commands:
             - attach_workspace:
                 at: C:\Users\circleci\project
 
+  create_maven_settings:
+    steps:
+      - run:
+          name: Create Maven settings.xml
+          command: |
+            mkdir -p ~/.m2
+            cat > ~/.m2/settings.xml <<EOF
+            <settings xmlns="http://maven.apache.org/SETTINGS/1.0.0">
+              <servers>
+                <server>
+                  <id>ossindex</id>
+                  <username>${OSSINDEX_USERNAME}</username>
+                  <password>${OSSINDEX_TOKEN}</password>
+                </server>
+              </servers>
+            </settings>
+            EOF
+
 jobs:
   license-check:
     parameters:
@@ -429,6 +447,7 @@ jobs:
           compute_size: << parameters.compute_size >>
       - install_maven:
           compute_size: << parameters.compute_size >>
+      - create_maven_settings:
       - restore_cache:
           keys:
             - << parameters.maven_cache_name_prefix >>-dependency-check-data-{{ checksum "/tmp/dependency-check-data/odc.mv.db" }}

elemental-parent/pom.xml

@@ -257,6 +257,7 @@
                         <nvdApiKeyEnvironmentVariable>NVD_API_KEY</nvdApiKeyEnvironmentVariable>
                         <nvdApiServerId>nvd-api</nvdApiServerId>
 
+                        <ossIndexServerId>ossindex</ossIndexServerId>
                         <!-- The OSS Index Server (https://ossindex.sonatype.org) can sometimes be flaky -->
                         <ossIndexWarnOnlyOnRemoteErrors>true</ossIndexWarnOnlyOnRemoteErrors>