Apply workaround for clojure NVD bug

See also: rm-hull/nvd-clojure#178
Basic-Data-Infrastructure · Aug 1, 2024 · a800366 · a800366
1 parent 859ced5
commit a800366
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/dependency-vulnerabilities.yml b/.github/workflows/dependency-vulnerabilities.yml
@@ -41,7 +41,7 @@ jobs:
       run: .github/workflows/install-binaries.sh
 
     - name: Install NVD clojure
-      run: bin/clojure -Ttools install nvd-clojure/nvd-clojure '{:mvn/version "RELEASE"}' :as nvd;
+      run: bin/clojure -Ttools install nvd-clojure/nvd-clojure '{:mvn/version "v4.0.0"}' :as nvd
 
     - name: Check that NVD Secret is set
       env:
@@ -53,4 +53,4 @@ jobs:
       env:
         NVD_API_TOKEN: ${{ secrets.NVD_API_TOKEN }}
       working-directory: ishare-jwt
-      run: ../bin/clojure -J-Dclojure.main.report=stderr -Tnvd nvd.task/check :config-filename '".nvd-config.edn"' :classpath "\"$(../bin/clojure -Spath)\""
+      run: ../bin/clojure -J-Dclojure.main.report=stderr -Sdeps '{:deps {org.owasp/dependency-check-maven {:mvn/version "10.0.2"}}}' -Tnvd nvd.task/check :config-filename '".nvd-config.json"' :classpath "\"$(../bin/clojure -Spath)\""