Skip to content

Commit 73c98b5

Browse files
committed
Add NVD api key for CVEs scanning
1 parent d9a0232 commit 73c98b5

1 file changed

Lines changed: 9 additions & 1 deletion

File tree

.github/workflows/cve-scanning-gradle.yml

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,8 @@ on:
1313
jobs:
1414
scan:
1515
runs-on: ubuntu-latest
16+
env:
17+
NVD_API_KEY: "${{ secrets.NVD_API_KEY }}"
1618
steps:
1719
- uses: actions/checkout@v4
1820
- name: Set up JDK 17
@@ -22,6 +24,12 @@ jobs:
2224
distribution: 'temurin'
2325
- name: Build with Gradle
2426
run: ./gradlew build
27+
- name: Check env variable
28+
run: >
29+
if [[ -z "${NVD_API_KEY}" ]]; then
30+
echo "[FAILURE] Missing NVD_API_KEY env variable" && exit 1
31+
else
32+
echo "[SUCCESS] NVD_API_KEY env variable exists"
33+
fi
2534
- name: CVEs
2635
run: ./gradlew dependencyCheckAggregate
27-

0 commit comments

Comments
 (0)