SSCSCI-940 gradle and dependency check update #1616

KatKovacs1 · 2024-07-05T09:13:12Z

Bump Gradle to 8.8 and dependency check plugin to 10.0.1: there was an update to the NVD API schema which caused a bug in the dependency check plugin, the bug was fixed in the 10.0.0 release so bumped dependency check to latest version (10.0.1). The updated plugin doesn't run on Gradle 7 so upgraded it to latest version (8.8)
Added NVD API Key and delay: the NVD API Key (should) cut down the time dependency check takes. The default delay is 3.5 sec with a key but that seems too short so set it to 8 sec (default delay without a key).
Updated suppression dates
Bumped Java version in GitHub actions to 17

.github/workflows/dependency-check.yml

katkovacs added 5 commits July 5, 2024 09:28

Bump Gradle to 8.8

b6708af

Bump dependency check to 10.0.1

3cb41e4

Updated suppressions

a499013

Updated Java version in GitHub actions and added NVD API Key

35a8064

Set delay to 8 seconds

655419c

KatKovacs1 marked this pull request as ready for review July 5, 2024 10:58

KatKovacs1 requested a review from a team as a code owner July 5, 2024 10:58

NHAL22 approved these changes Jul 5, 2024

View reviewed changes

nitinprabhuhmcts reviewed Jul 5, 2024

View reviewed changes

.github/workflows/dependency-check.yml Outdated Show resolved Hide resolved

nitinprabhuhmcts approved these changes Jul 5, 2024

View reviewed changes

benouaer approved these changes Jul 5, 2024

View reviewed changes

katkovacs added 2 commits July 5, 2024 12:25

Comment removed

8c04345

Comment removed

9699ea3

nitinprabhuhmcts approved these changes Jul 5, 2024

View reviewed changes

nitinprabhuhmcts merged commit d9b59a7 into master Jul 8, 2024
7 checks passed

nitinprabhuhmcts deleted the SSCSCI-940-dependency-check-update branch July 8, 2024 11:22

Provide feedback