diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 75be72024..e8b53a7a0 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -16,6 +16,7 @@ env:
     -Dhttp.keepAlive=false
     -Dmaven.wagon.http.pool=false
     -Dmaven.wagon.httpconnectionManager.ttlSeconds=120
+  NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
 
 jobs:
   build:
diff --git a/.zappr.yaml b/.zappr.yaml
index 4c17ace9c..174c65d16 100644
--- a/.zappr.yaml
+++ b/.zappr.yaml
@@ -7,3 +7,4 @@ approvals:
         orgs:
           - "zalando"
 X-Zalando-Type: code
+X-Zalando-Team: zelda
diff --git a/pom.xml b/pom.xml
index f152e993e..3b81e7774 100644
--- a/pom.xml
+++ b/pom.xml
@@ -136,6 +136,7 @@
                         <suppressionFiles>
                             <suppressionFile>cve-suppressions.xml</suppressionFile>
                         </suppressionFiles>
+                        <nvdApiKeyEnvironmentVariable>NVD_API_KEY</nvdApiKeyEnvironmentVariable>
                     </configuration>
                 </plugin>
                 <plugin>