fix

Author: trask

.github/workflows/owasp-dependency-check-daily.yml

@@ -13,7 +13,7 @@ permissions:
 
 jobs:
   analyze:
-    runs-on: otel-linux-latest-8-cores
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 

buildSrc/src/main/kotlin/otel.java-conventions.gradle.kts

@@ -191,7 +191,19 @@ afterEvaluate {
 }
 
 dependencyCheck {
-  skipConfigurations = listOf("errorprone", "checkstyle", "annotationProcessor")
+  skipConfigurations = mutableListOf(
+    "errorprone",
+    "checkstyle",
+    "annotationProcessor",
+    "moduleAnnotationProcessor",
+    "testAnnotationProcessor",
+    "animalsniffer",
+    "jmhAnnotationProcessor",
+    "jmhBasedTestAnnotationProcessor",
+    "jmhCompileClasspath",
+    "jmhRuntimeClasspath",
+    "jmhRuntimeOnly")
+  failBuildOnCVSS = 7.0f // fail on high or critical CVE
   failBuildOnCVSS = 7.0f // fail on high or critical CVE
   nvd.apiKey = System.getenv("NVD_API_KEY")
   nvd.delay = 3500 // until next dependency check release (https://github.com/jeremylong/DependencyCheck/pull/6333)