adjust dependency check plugin

cryptomator · Dec 13, 2023 · 978b5b5 · 978b5b5
1 parent 08e192b
commit 978b5b5
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/.github/workflows/dependency-check.yml b/.github/workflows/dependency-check.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Run org.owasp:dependency-check plugin
         id: dependency-check
         continue-on-error: true
-        run: mvn -B verify -Pdependency-check -DskipTests
+        run: mvn -B validate -Pdependency-check
         env:
           NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
       - name: Upload report on failure

diff --git a/pom.xml b/pom.xml
@@ -317,6 +317,7 @@
 						<artifactId>dependency-check-maven</artifactId>
 						<version>${dependency-check.version}</version>
 						<configuration>
+							<nvdValidForHours>24</nvdValidForHours>
 							<failBuildOnCVSS>0</failBuildOnCVSS>
 							<skipTestScope>true</skipTestScope>
 							<detail>true</detail>
@@ -327,6 +328,7 @@
 							<execution>
 								<goals>
 									<goal>check</goal>
+									<phase>validate</phase>
 								</goals>
 							</execution>
 						</executions>