change config 3

.github/workflows/agent_test.yml

@@ -94,23 +94,33 @@ jobs:
           verbose: true
 
   dependency-scan:
-    uses: ./.github/workflows/dependency_check_agent.yml
-    secrets: inherit
-
-#    steps:
-#      - uses: actions/checkout@v3
-#      - name: Grant execute permission for gradlew
-#        run: chmod +x gradlew
-#      - name: Scan dependencies inspectit-ocelot-sdk
-#        run: ./gradlew :inspectit-ocelot-sdk:dependencyCheckAnalyze
-#      - name: Scan dependencies inspectit-ocelot-config
-#        run: ./gradlew :inspectit-ocelot-config:dependencyCheckAnalyze
-#      - name: Scan dependencies inspectit-ocelot-core
-#        run: ./gradlew :inspectit-ocelot-core:dependencyCheckAnalyze
-#      - name: Scan dependencies inspectit-ocelot-bootstrap
-#        run: ./gradlew :inspectit-ocelot-bootstrap:dependencyCheckAnalyze
-#      - name: Scan dependencies inspectit-ocelot-agent
-#        run: ./gradlew :inspectit-ocelot-agent:dependencyCheckAnalyze
+    name: Dependency Scan
+    runs-on: ubuntu-latest
+    container: eclipse-temurin:8-jdk
+    steps:
+      - uses: actions/checkout@v3
+      - name: Grant execute permission for gradlew
+        run: chmod +x gradlew
+      - name: build
+        run: ./gradlew :inspectit-ocelot-agent:assemble
+      # the action has not been updated a while, but it always uses the latest plugin version
+      - name: DependencyCheck inspectit-ocelot-agent
+        uses: dependency-check/Dependency-Check_Action@main
+        with:
+          project: inspectIT/inspectit-ocelot-agent
+          path: 'inspectit-ocelot-agent'
+          format: 'HTML'
+          out: 'reports'
+          args: >
+            --disableAssembly
+            --disableNodeAudit
+            --nvdApiKey ${{ secrets.NVD_API_KEY }}
+            --nvdApiDelay 10000
+      - name: Upload test results
+        uses: actions/upload-artifact@v4
+        with:
+          name: dependency-check-report-ocelot-agent
+          path: ${{ github.workspace }}/reports
 
   jmh-compile:
     name: 'Compile JMH Tests'