diff --git a/.github/workflows/cve-scanning-gradle.yml b/.github/workflows/cve-scanning-gradle.yml
index f5285e64c..a3dd87cb7 100644
--- a/.github/workflows/cve-scanning-gradle.yml
+++ b/.github/workflows/cve-scanning-gradle.yml
@@ -20,8 +20,16 @@ jobs:
         with:
           java-version: '17'
           distribution: 'temurin'
+      - name: Check NVD API Key
+        shell: bash
+        run: |
+          echo "Key length: ${#NVD_API_KEY}" || echo "Could not determine key length"
+        env:
+          NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
       - name: Build with Gradle
         run: ./gradlew build
       - name: CVEs
-        run: ./gradlew dependencyCheckAggregate
+        run: ./gradlew dependencyCheckAggregate -Dnvd.api.key=$NVD_API_KEY
+        env:
+          NVD_API_KEY: ${{ secrets.NVD_API_KEY }}