From e55362485a3db0c11519dd4b7ec3dd7e10f02ac9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?T=C3=A1=20V=C3=B5?= <ta.vo@symphony.com>
Date: Thu, 14 Aug 2025 20:16:24 +0700
Subject: [PATCH] Adding NVD api key to fix CVEs scanning issue

---
 .github/workflows/cve-scanning-gradle.yml | 3 +--
 build.gradle                              | 2 +-
 2 files changed, 2 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/cve-scanning-gradle.yml b/.github/workflows/cve-scanning-gradle.yml
index f5285e64c..25c398520 100644
--- a/.github/workflows/cve-scanning-gradle.yml
+++ b/.github/workflows/cve-scanning-gradle.yml
@@ -23,5 +23,4 @@ jobs:
       - name: Build with Gradle
         run: ./gradlew build
       - name: CVEs
-        run: ./gradlew dependencyCheckAggregate
-
+        run: ./gradlew dependencyCheckAggregate -PdependencyCheck.nvd.apiKey=${{ secrets.NVD_API_KEY }} -PdependencyCheck.nvd.apiDelay=5000
diff --git a/build.gradle b/build.gradle
index 420148856..b4955d02f 100644
--- a/build.gradle
+++ b/build.gradle
@@ -1,6 +1,6 @@
 plugins {
     id "io.github.gradle-nexus.publish-plugin" version "1.3.0"
-    id "org.owasp.dependencycheck" version "9.0.9"
+    id "org.owasp.dependencycheck" version "12.1.3"
 }
 
 ext.projectVersion = '3.2.0-SNAPSHOT'