From 6702982701e9638a07bee8984289120eed49650c Mon Sep 17 00:00:00 2001
From: Armin Schrenk <armin.schrenk@skymatic.de>
Date: Wed, 13 Dec 2023 16:21:50 +0100
Subject: [PATCH] adjust dependency check plugin

---
 .github/workflows/dependency-check.yml | 2 +-
 pom.xml                                | 4 ++++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/dependency-check.yml b/.github/workflows/dependency-check.yml
index f22b30c..10172f3 100644
--- a/.github/workflows/dependency-check.yml
+++ b/.github/workflows/dependency-check.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Run org.owasp:dependency-check plugin
         id: dependency-check
         continue-on-error: true
-        run: mvn -B verify -Pdependency-check -DskipTests
+        run: mvn -B validate -Pdependency-check
         env:
           NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
       - name: Upload report on failure
diff --git a/pom.xml b/pom.xml
index 380f4c5..b57e53f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -182,7 +182,10 @@
 						<artifactId>dependency-check-maven</artifactId>
 						<version>${dependency-check.version}</version>
 						<configuration>
+							<nvdValidForHours>24</nvdValidForHours>
 							<failBuildOnCVSS>6</failBuildOnCVSS>
+							<skipTestScope>true</skipTestScope>
+							<detail>true</detail>
 							<nvdApiKey>${env.NVD_API_KEY}</nvdApiKey>
 						</configuration>
 						<executions>
@@ -190,6 +193,7 @@
 								<goals>
 									<goal>check</goal>
 								</goals>
+								<phase>validate</phase>
 							</execution>
 						</executions>
 					</plugin>