Currently they are failing. Should we disable OSS index or can we supply an API key?

Happy to submit a PR.

e.g https://github.com/dependency-check/DependencyCheck/actions/runs/17907667184/job/50911911846