Hello,

I have downloaded the NVD data using vulnz and put it on a google cloud storage bucket at this location:

https://storage.googleapis.com/mydummybucket/nvd-cache

Then am trying to use this bucket url for maven command like this:

mvn org.owasp:dependency-check-maven:check -DnvdDatafeedUrl=https://storage.googleapis.com/mydummybucket/nvd-cache

Now if I keep the bucket open for public access, it's fine and maven is able to download the data from the bucket but if I make the bucket private and try to use it via a service account key, I don't know how to do it.

I am able to download the data using gcloud commands after making the bucket private and using the service account key but ofcourse mvn is not able to use the same mechanism as gcloud for authentication.

I tried to find some option here but couldn't find any.

Can someone please help me what would be the best way to achieve this?