diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 2e5a2d2e6..532331fc8 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -20,6 +20,10 @@ on: branches: [master] permissions: contents: read + +env: + NVD_API_KEY: ${{ secrets.NVD_API_KEY }} + jobs: analyze: name: Analyze diff --git a/.github/workflows/container_test.yml b/.github/workflows/container_test.yml index 57da88174..dc5505f9b 100644 --- a/.github/workflows/container_test.yml +++ b/.github/workflows/container_test.yml @@ -11,7 +11,11 @@ on: workflow_dispatch: permissions: contents: read -# A workflow run is made up of one or more jobs that can run sequentially or in parallel + +env: + NVD_API_KEY: ${{ secrets.NVD_API_KEY }} + + # A workflow run is made up of one or more jobs that can run sequentially or in parallel jobs: test: name: Container test diff --git a/.github/workflows/dast-zap-test.yml b/.github/workflows/dast-zap-test.yml index 4cad1faf5..6b990e98b 100644 --- a/.github/workflows/dast-zap-test.yml +++ b/.github/workflows/dast-zap-test.yml @@ -8,6 +8,9 @@ on: permissions: contents: read +env: + NVD_API_KEY: ${{ secrets.NVD_API_KEY }} + jobs: test-dast: name: DAST test with ZAP diff --git a/.github/workflows/desktop-container-publish.yml b/.github/workflows/desktop-container-publish.yml index 96e7f176b..04262bde9 100644 --- a/.github/workflows/desktop-container-publish.yml +++ b/.github/workflows/desktop-container-publish.yml @@ -10,6 +10,9 @@ permissions: contents: read packages: write +env: + NVD_API_KEY: ${{ secrets.NVD_API_KEY }} + jobs: build-and-publish-desktop: runs-on: ubuntu-latest diff --git a/.github/workflows/github-pages-preview.yml b/.github/workflows/github-pages-preview.yml index 05c1d1713..2309c0063 100644 --- a/.github/workflows/github-pages-preview.yml +++ b/.github/workflows/github-pages-preview.yml @@ -19,6 +19,10 @@ concurrency: group: "pages-pr-${{ github.event.number }}" cancel-in-progress: true +env: + NVD_API_KEY: ${{ secrets.NVD_API_KEY }} + + jobs: generate-static-preview: runs-on: ubuntu-latest diff --git a/.github/workflows/java_swagger_doc.yml b/.github/workflows/java_swagger_doc.yml index 8a8295541..b65b53873 100644 --- a/.github/workflows/java_swagger_doc.yml +++ b/.github/workflows/java_swagger_doc.yml @@ -9,6 +9,11 @@ on: branches: [ master ] permissions: contents: read + +env: + NVD_API_KEY: ${{ secrets.NVD_API_KEY }} + + jobs: javaDocGenerator: runs-on: ubuntu-latest diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 3366ceb79..65c689c15 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -19,6 +19,11 @@ permissions: issues: read pull-requests: write # A workflow run is made up of one or more jobs that can run sequentially or in parallel + +env: + NVD_API_KEY: ${{ secrets.NVD_API_KEY }} + + jobs: lint: name: lint javacode diff --git a/.github/workflows/master-container-publish.yml b/.github/workflows/master-container-publish.yml index 41f43cca5..714a254b2 100644 --- a/.github/workflows/master-container-publish.yml +++ b/.github/workflows/master-container-publish.yml @@ -10,6 +10,9 @@ permissions: contents: read packages: write +env: + NVD_API_KEY: ${{ secrets.NVD_API_KEY }} + jobs: build-and-publish: runs-on: ubuntu-latest diff --git a/.github/workflows/pr-preview.yml b/.github/workflows/pr-preview.yml index d1cb8f791..01ac11b13 100644 --- a/.github/workflows/pr-preview.yml +++ b/.github/workflows/pr-preview.yml @@ -14,6 +14,9 @@ permissions: packages: write pull-requests: write +env: + NVD_API_KEY: ${{ secrets.NVD_API_KEY }} + jobs: build-preview: runs-on: ubuntu-latest diff --git a/.github/workflows/visual-diff.yml b/.github/workflows/visual-diff.yml index 853041842..c043bdeb4 100644 --- a/.github/workflows/visual-diff.yml +++ b/.github/workflows/visual-diff.yml @@ -6,6 +6,10 @@ on: - 'src/main/resources/templates/**' - 'src/main/resources/static/**' +env: + NVD_API_KEY: ${{ secrets.NVD_API_KEY }} + + jobs: visual-diff: runs-on: ubuntu-latest