You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@iotdb.apache.org by ha...@apache.org on 2025/09/22 11:29:20 UTC

(iotdb) branch master updated: Fix vulnerability check (#16455)

This is an automated email from the ASF dual-hosted git repository.

haonan pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/iotdb.git


The following commit(s) were added to refs/heads/master by this push:
     new 05072035af8 Fix vulnerability check (#16455)
05072035af8 is described below

commit 05072035af832b3e2a44bcaf411784dcb55e4f4a
Author: Haonan <hh...@outlook.com>
AuthorDate: Mon Sep 22 19:29:15 2025 +0800

    Fix vulnerability check (#16455)
---
 .github/workflows/vulnerability-check.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/vulnerability-check.yml b/.github/workflows/vulnerability-check.yml
index b0e7ab86fb7..d14ef682bf6 100644
--- a/.github/workflows/vulnerability-check.yml
+++ b/.github/workflows/vulnerability-check.yml
@@ -41,10 +41,10 @@ jobs:
         run: mvn clean install -DskipTests
       - name: Do the dependency-check:check
         shell: bash
-        run: mvn org.owasp:dependency-check-maven:check
+        run: mvn org.owasp:dependency-check-maven:check -DossIndexUsername=${{ secrets.OSS_INDEX_USER }} -DossIndexPassword=${{ secrets.OSS_INDEX_TOKEN }}
       - name: Do the dependency-check:aggregate
         shell: bash
-        run: mvn org.owasp:dependency-check-maven:aggregate
+        run: mvn org.owasp:dependency-check-maven:aggregate -DossIndexUsername=${{ secrets.OSS_INDEX_USER }} -DossIndexPassword=${{ secrets.OSS_INDEX_TOKEN }}
       - name: Convert UTC to East Asia Standard Time and Extract Date
         run: |
           utc_time="${{ github.run_started_at }}"