Fix OWASP dependency-check resolution failure in multi-module build

[Copilot]

The dependency-check workflow fails when analyzing jlib-inspector-agent because it cannot resolve the jlib-inspector-common dependency. Running org.owasp:dependency-check-maven:check as a separate Maven invocation after install loses the reactor context needed for inter-module dependency resolution.

Changes

• Combine clean install and dependency-check:check into single Maven invocation
• Apply to both security.yml and ci.yml workflows for consistency

Before

- name: Build and install modules
  run: ./mvnw clean install -DskipTests -B
- name: Run OWASP Dependency Check
  run: |
    ./mvnw org.owasp:dependency-check-maven:check \
      -Dformat=ALL -DfailBuildOnCVSS=7 \
      -DnvdApiKey=${{ secrets.NVD_API_KEY }} -B

After

- name: Build modules and run dependency check
  run: |
    ./mvnw clean install org.owasp:dependency-check-maven:check \
      -DskipTests \
      -Dformat=ALL -DfailBuildOnCVSS=7 \
      -DnvdApiKey=${{ secrets.NVD_API_KEY }} -B

This ensures the plugin executes within the reactor build where all modules are available.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• dlcdn.apache.org
  • Triggering command: /usr/bin/wget wget --quiet REDACTED -O /tmp/tmp.9C4Jzt2MTD/apache-maven-4.0.0-rc-5-bin.zip (dns block)
  • Triggering command: /usr/bin/wget wget --quiet REDACTED -O /tmp/tmp.fJwgpUYh9E/apache-maven-4.0.0-rc-5-bin.zip (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

Fix the failing GitHub Actions workflow Dependency Security Scan
Analyze the workflow logs, identify the root cause of the failure, and implement a fix.
Job ID: 63451692159
Job URL: https://github.com/brunoborges/jlib-inspector/actions/runs/21964802762/job/63451692159

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.