Remove owasp checks

Author: acoburn

.github/workflows/ci-config.yml

@@ -96,37 +96,6 @@ jobs:
       - name: Build the code with Maven
         run: mvn -B -ntp verify -Pwebsite javadoc:javadoc
 
-  dependencies:
-    name: Dependency Check
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        java: [ 17 ]
-
-    steps:
-      - uses: actions/checkout@v6
-
-      - name: Set up JDK ${{ matrix.java }}
-        uses: actions/setup-java@v5
-        with:
-          distribution: 'temurin'
-          java-version: ${{ matrix.java }}
-          cache: 'maven'
-
-      - name: Generate Cache Name
-        shell: bash
-        run: echo "CACHE_NAME=$(date '+%y.%j')" >> $GITHUB_ENV
-
-      - name: Restore NVD data cache
-        uses: actions/cache@v5
-        with:
-          key: nvd-data-${{ env.CACHE_NAME }}
-          restore-keys: nvd-data-
-          path: ./data/cache
-
-      - name: Verify dependencies
-        run: mvn -B -ntp verify -Pdependencies -Dnvd.api.datafeed="file:${GITHUB_WORKSPACE}/data/cache/nvdcve-{0}.json.gz"
-
   sonar:
     name: Sonar Scan
     runs-on: ubuntu-latest

.github/workflows/nvd-cache.yml

@@ -56,7 +56,6 @@
     <jar.plugin.version>3.5.0</jar.plugin.version>
     <javadoc.plugin.version>3.12.0</javadoc.plugin.version>
     <license.plugin.version>5.0.0</license.plugin.version>
-    <owasp.plugin.version>12.2.0</owasp.plugin.version>
     <projectinfo.plugin.version>3.9.0</projectinfo.plugin.version>
     <pmd.plugin.version>3.28.0</pmd.plugin.version>
     <site.plugin.version>3.21.0</site.plugin.version>
@@ -81,10 +80,7 @@
     <wiremock.version>3.13.2</wiremock.version>
 
     <!-- disable by default (enabled by profile in CI) -->
-    <dependency-check.skip>true</dependency-check.skip>
     <archetype.test.skip>true</archetype.test.skip>
-    <nvd.api.key />
-    <nvd.api.datafeed />
 
     <!-- sonar -->
     <sonar.coverage.jacoco.xmlReportPaths>${maven.multiModuleProjectDirectory}/reports/target/site/jacoco-merged/jacoco.xml</sonar.coverage.jacoco.xmlReportPaths>
@@ -510,11 +506,6 @@
             </execution>
           </executions>
         </plugin>
-        <plugin>
-          <groupId>org.owasp</groupId>
-          <artifactId>dependency-check-maven</artifactId>
-          <version>${owasp.plugin.version}</version>
-        </plugin>
       </plugins>
     </pluginManagement>
 
@@ -615,31 +606,6 @@
           </execution>
         </executions>
       </plugin>
-      <plugin>
-        <groupId>org.owasp</groupId>
-        <artifactId>dependency-check-maven</artifactId>
-        <executions>
-          <execution>
-            <goals>
-              <goal>check</goal>
-            </goals>
-          </execution>
-        </executions>
-        <configuration>
-          <failBuildOnCVSS>7</failBuildOnCVSS>
-          <ossIndexWarnOnlyOnRemoteErrors>true</ossIndexWarnOnlyOnRemoteErrors>
-          <formats>
-            <format>HTML</format>
-            <format>JSON</format>
-            <format>CSV</format>
-          </formats>
-          <suppressionFile>
-              ./build-tools/owasp/suppressions.xml
-          </suppressionFile>
-          <nvdApiKey>${nvd.api.key}</nvdApiKey>
-          <nvdDatafeedUrl>${nvd.api.datafeed}</nvdDatafeedUrl>
-        </configuration>
-      </plugin>
       <plugin>
         <groupId>org.sonatype.central</groupId>
         <artifactId>central-publishing-maven-plugin</artifactId>
@@ -747,23 +713,6 @@
           </reportSet>
         </reportSets>
       </plugin>
-      <plugin>
-        <groupId>org.owasp</groupId>
-        <artifactId>dependency-check-maven</artifactId>
-        <version>${owasp.plugin.version}</version>
-        <reportSets>
-          <reportSet>
-            <reports>
-              <report>aggregate</report>
-            </reports>
-          </reportSet>
-        </reportSets>
-        <configuration>
-          <suppressionFiles>
-            <suppressionFile>./build-tools/owasp/suppressions.xml</suppressionFile>
-          </suppressionFiles>
-        </configuration>
-      </plugin>
     </plugins>
   </reporting>
 
@@ -838,18 +787,6 @@
         <archetype.test.skip>true</archetype.test.skip>
       </properties>
     </profile>
-    <profile>
-      <id>dependencies</id>
-      <properties>
-        <skipTests>true</skipTests>
-        <pmd.skip>true</pmd.skip>
-        <cpd.skip>true</cpd.skip>
-        <dependency-check.skip>false</dependency-check.skip>
-        <jacoco.skip>true</jacoco.skip>
-        <checkstyle.skip>true</checkstyle.skip>
-        <archetype.test.skip>true</archetype.test.skip>
-      </properties>
-    </profile>
     <profile>
       <id>java-21</id>
       <activation>