Still doing the Spring Boot REST API exercise and I have added PMD, Checkstyle, Spotbugs, FindSecBugs, and OWASP Dependency Checker.

At the same time API keys for the downstream API providers can be set in the environment.

Only problem now because I have not created an NVD API key, the OWASP Dependency Checker is taking a long time to update so might as well leave for a 10km run and hope that once I came back, mvn verify is finished by then.