Merge pull request #254 from funfried/release/1.15.x

Added NVD API Key for dependency check plugin

Author: funfried

.ci.settings.xml

@@ -46,6 +46,10 @@
 			<username>${env.sonatype_username}</username>
 			<password>${env.sonatype_password}</password>
 		</server>
+		<server>
+			<id>nvd-api-key</id>
+			<password>${env.nvd_api_key}</password>
+		</server>
 	</servers>
 
 	<mirrors>

.github/workflows/linux_maven.yml

@@ -26,3 +26,4 @@ jobs:
       run: mvn -s .ci.settings.xml --no-transfer-progress -Dgh_username=${{ secrets.GH_USERNAME }} -Dgh_token=${{ secrets.GH_TOKEN }} -Prelease-commons,sonatype-oss-release package site
       env:
         MAVEN_OPTS: -Xms128m -Xmx512m --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.text=ALL-UNNAMED --add-opens=java.desktop/java.awt.font=ALL-UNNAMED
+        nvd_api_key: ${{ secrets.NVD_API_KEY }}

.github/workflows/release_maven.yml

@@ -39,3 +39,4 @@ jobs:
         repoToken: ${{ secrets.COVERALLS_REPOTOKEN }}
         signing_keypass: ${{ secrets.GPG_PASSPHRASE }}
         skipRemoteStaging: ${{ secrets.SKIP_REMOTE_STAGING }}
+        nvd_api_key: ${{ secrets.NVD_API_KEY }}

.github/workflows/windows_maven.yml

@@ -34,3 +34,4 @@ jobs:
         repoToken: ${{ secrets.GH_REPOTOKEN }}
         signing_keypass: ${{ secrets.GPG_PASSPHRASE }}
         skipRemoteStaging: ${{ secrets.SKIP_REMOTE_STAGING }}
+        nvd_api_key: ${{ secrets.NVD_API_KEY }}

pom.xml

@@ -756,7 +756,7 @@
 					<artifactId>dependency-check-maven</artifactId>
 					<version>9.0.9</version>
 					<configuration>
-						<failBuildOnCVSS>3</failBuildOnCVSS>
+						<nvdApiServerId>nvd-api-key</nvdApiServerId>
 						<assemblyAnalyzerEnabled>false</assemblyAnalyzerEnabled>
 					</configuration>
 				</plugin>