configure NVD API key for dependency check

.github/workflows/build_after_push.yml

@@ -21,6 +21,8 @@ jobs:
         uses: gradle/wrapper-validation-action@v1
       - name: Build with Gradle
         uses: gradle/gradle-build-action@v2
+        env:
+          NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
         with:
           arguments: |
             build

README.md

@@ -24,3 +24,7 @@ Refer to `main.kt` in `kotlin-rocket-bot` for an example on how to do this.
 
 __Important__: This bot handles incoming Rocket.Chat messages asynchronously.
 Therefore, you need to ensure thread-safety in your handlers.  
+
+## About the build
+
+This product uses the NVD API but is not endorsed or certified by the NVD.

build.gradle.kts

@@ -44,6 +44,7 @@ configure<DependencyCheckExtension> {
     analyzers.assemblyEnabled = false
     failBuildOnCVSS = 7f
     suppressionFile = file("$rootDir/cve-suppressions.xml").toString()
+    nvd.apiKey = System.getenv("NVD_API_KEY")
 }
 
 repositories {