Merge branch 'main' into renovate/maven-3.x

Author: jpgough-ms

.github/maven-cve-ignore-list.xml

@@ -1,3 +1,8 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
-</suppressions>
+    <!-- Suppress quarkus-run.jar -->
+    <suppress>
+        <filePath regex="true">.*quarkus-run\.jar</filePath>
+        <cvssBelow>10.0</cvssBelow>
+    </suppress>
+</suppressions>

.github/workflows/cve-scanning-maven.yml

@@ -1,4 +1,4 @@
-name: CVE Scanning for Maven
+name: CVE Scanning for Maven Projects
 
 on:
   workflow_dispatch:
@@ -22,20 +22,24 @@ jobs:
       matrix:
         java-version: [ '21' ]
         module-folder: [
-          'translator'
+          'translator',
+          'calm-hub'
         ]
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+
       - name: Setup JDK
         uses: actions/setup-java@v4
         with:
           java-version: ${{ matrix.java-version }}
           cache: maven
           distribution: 'adopt'
+
       - name: Build with Maven
-        run: mvn clean install -Dmaven.test.skip=true
+        run: mvn -DskipTests verify
         working-directory: ${{ matrix.module-folder }}
+
       - name: Depcheck
         uses: dependency-check/Dependency-Check_Action@main
         id: Depcheck
@@ -45,15 +49,20 @@ jobs:
           project: '${{ matrix.module-folder }}'
           path: '${{ matrix.module-folder }}'
           format: 'HTML'
-          out: '${{ matrix.module-folder }}-reports' # this is the default, no need to specify unless you wish to override it
+          out: '${{ matrix.module-folder }}-reports'
           args: >
-            --suppression .github/maven-cve-ignore-list.xml
-            --failOnCVSS 5
-            --enableRetired
+              --suppression .github/maven-cve-ignore-list.xml
+              --failOnCVSS 5
+              --enableRetired
+              --exclude "**/package.json"
+              --exclude "**/package-lock.json"
+              --disableNodeAudit
+              --disableYarnAudit
+              --disableRetireJS
 
       - name: Upload Test results
         if: ${{ always() }}
         uses: actions/upload-artifact@v4
         with:
           name: Depcheck report ${{ github.job }} ${{ matrix.module-folder }}
-          path: ${{ github.workspace }}/${{ matrix.module-folder }}-reports
+          path: ${{ github.workspace }}/${{ matrix.module-folder }}-reports