Skip to content

Adding NVD api key to fix CVEs scanning issue#831

Merged
vladokrsymphony merged 1 commit intofinos:mainfrom
tavv94:fix_nvd_key
Aug 14, 2025
Merged

Adding NVD api key to fix CVEs scanning issue#831
vladokrsymphony merged 1 commit intofinos:mainfrom
tavv94:fix_nvd_key

Conversation

@tavv94
Copy link
Copy Markdown
Contributor

@tavv94 tavv94 commented Aug 13, 2025

Description

Closes #[ISSUE NUMBER]

Please put here the intent of your pull request.

Dependencies

List the other pull requests that should be merged before/along this one.

Checklist

  • Referenced an issue in the PR title or description
  • Filled properly the description and dependencies, if any
  • Unit/Integration tests updated or added
  • Javadoc added or updated
  • Updated the documentation in docs folder

@tavv94 tavv94 force-pushed the fix_nvd_key branch 2 times, most recently from 6d24a8c to 4cb16a3 Compare August 13, 2025 04:10
@tavv94 tavv94 changed the title Fix NVD error Adding NVD api key to fix CVEs scanning issue Aug 13, 2025
@TheJuanAndOnly99
Copy link
Copy Markdown
Member

hi @tavv94 forks don't have access to secrets so the NVD_API_KEY secret is not accessible to your PR. Also I would take a look at this thread dependency-check/DependencyCheck#6561 where they suggest using the following

- name: CVEs
  run: ./gradlew dependencyCheckAggregate -PdependencyCheck.nvd.apiKey=${{ secrets.NVD_API_KEY }} -PdependencyCheck.nvd.apiDelay=5000

@tavv94
Copy link
Copy Markdown
Contributor Author

tavv94 commented Aug 14, 2025

hi @tavv94 forks don't have access to secrets so the NVD_API_KEY secret is not accessible to your PR. Also I would take a look at this thread dependency-check/DependencyCheck#6561 where they suggest using the following

- name: CVEs
  run: ./gradlew dependencyCheckAggregate -PdependencyCheck.nvd.apiKey=${{ secrets.NVD_API_KEY }} -PdependencyCheck.nvd.apiDelay=5000

Perfect, I will try using a command you suggested above and push to the original ORG. Thank you!

@vladokrsymphony vladokrsymphony merged commit b0a111f into finos:main Aug 14, 2025
3 of 5 checks passed
@tavv94 tavv94 deleted the fix_nvd_key branch August 14, 2025 13:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants