From 94cb7a077c1c0800471c920b5f8b4a4eac9118c4 Mon Sep 17 00:00:00 2001
From: Trey Chadick <tchad@labkey.com>
Date: Tue, 14 Apr 2026 08:02:18 -0700
Subject: [PATCH] Use mirrored NVD datafeed for dependency check (#1335)

---
 build.gradle | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/build.gradle b/build.gradle
index 4bb7c7a57e..a5224c25f8 100644
--- a/build.gradle
+++ b/build.gradle
@@ -44,11 +44,9 @@ allprojects {
             formats = ['HTML', 'JUNIT']
             skipConfigurations = ['dedupe', 'gwtCompileClasspath', 'gwtRuntimeClasspath', 'developmentOnly']
             skipProjects = [':server:testAutomation']
-            if (project.hasProperty('nvdApiKey'))
-            {
-                nvd {
-                    apiKey = "${project.property('nvdApiKey')}"
-                }
+
+            nvd {
+                datafeedUrl = 'https://dependency-check.github.io/DependencyCheck_Builder/nvd_cache/nvdcve-{0}.json.gz'
             }
         }
     }