diff --git a/buildSrc/src/main/kotlin/ds3-java-sdk-library-convention.gradle.kts b/buildSrc/src/main/kotlin/ds3-java-sdk-library-convention.gradle.kts index 45da08ef1..8044d7b79 100644 --- a/buildSrc/src/main/kotlin/ds3-java-sdk-library-convention.gradle.kts +++ b/buildSrc/src/main/kotlin/ds3-java-sdk-library-convention.gradle.kts @@ -58,4 +58,5 @@ dependencyCheck { // fail the build if any vulnerable dependencies are identified (CVSS score > 0) failBuildOnCVSS = 0f; suppressionFile = "project_files/owasp/dependency-check-suppression.xml" + nvd.apiKey = System.getenv("NVD_API_KEY") } diff --git a/libs.versions.toml b/libs.versions.toml index f476094a6..208acbb7c 100644 --- a/libs.versions.toml +++ b/libs.versions.toml @@ -70,7 +70,7 @@ slf4jSimple = { group = "org.slf4j", name = "slf4j-simple", version.ref = "slf4j # plugins used in buildSrc/ # kotlinJvmPlugin = { group = "org.jetbrains.kotlin", name = "kotlin-gradle-plugin", version.ref = "kotlinVersion" } -owaspDepCheckPlugin = { group = "org.owasp", name = "dependency-check-gradle", version = "8.4.0" } +owaspDepCheckPlugin = { group = "org.owasp", name = "dependency-check-gradle", version = "10.0.3" } versionsPlugin = { group = "com.github.ben-manes", name = "gradle-versions-plugin", version = "0.47.0" } [plugins]