diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 200f805fa..b4b41c557 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -26,6 +26,12 @@ jobs:
     steps:
     - name: Checkout
       uses: actions/checkout@v3
+    - name: Dependency Review
+      uses: actions/dependency-review-action@v4
+      with:
+        vulnerability-check: true
+        license-check: false
+        comment-summary-in-pr: on-failure
     - name: Set up JDK
       uses: actions/setup-java@v3
       with:
diff --git a/cve-suppressions.xml b/cve-suppressions.xml
deleted file mode 100644
index 439089144..000000000
--- a/cve-suppressions.xml
+++ /dev/null
@@ -1,25 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
-
-    <!-- Please add CPE or link for each CVE you add -->
-
-    <suppress>
-        <!-- okhttp-2.7.5 - The vulnerability is in OkHostnameVerifier.java, which is not used in this library -->
-        <cve>CVE-2021-0341</cve>
-
-        <!-- okhttp-2.7.5 -->
-        <cve>CVE-2023-0833</cve>
-
-        <!-- https://github.com/FasterXML/jackson-databind/issues/3972 -->
-        <cve>CVE-2023-35116</cve>
-
-        <!-- okhttp-4.11.0 - The vulernability is only in the brotli packages of okhttp, which are not used in this library -->
-        <cve>CVE-2023-3782</cve>
-
-        <!-- vulnerability is in reserved state. No mitigation has been released yet -->
-        <cve>CVE-2023-4586</cve>
-
-        <!-- fixed with json-path 2.9.0 but is still reported. Suppressing as false positive -->
-        <cve>CVE-2023-51074</cve>
-    </suppress>
-</suppressions>
diff --git a/logbook-parent/pom.xml b/logbook-parent/pom.xml
index 3696d302f..16a922c9d 100644
--- a/logbook-parent/pom.xml
+++ b/logbook-parent/pom.xml
@@ -547,25 +547,6 @@
                         <generateBackupPoms>false</generateBackupPoms>
                     </configuration>
                 </plugin>
-                <plugin>
-                    <groupId>org.owasp</groupId>
-                    <artifactId>dependency-check-maven</artifactId>
-                    <version>8.4.3</version>
-                    <executions>
-                        <execution>
-                            <goals>
-                                <goal>check</goal>
-                            </goals>
-                        </execution>
-                    </executions>
-                    <configuration>
-                        <failBuildOnCVSS>0.0</failBuildOnCVSS>
-                        <assemblyAnalyzerEnabled>false</assemblyAnalyzerEnabled>
-                        <suppressionFiles>
-                            <suppressionFile>cve-suppressions.xml</suppressionFile>
-                        </suppressionFiles>
-                    </configuration>
-                </plugin>
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-shade-plugin</artifactId>
@@ -636,10 +617,6 @@
                 <groupId>org.jacoco</groupId>
                 <artifactId>jacoco-maven-plugin</artifactId>
             </plugin>
-            <plugin>
-                <groupId>org.owasp</groupId>
-                <artifactId>dependency-check-maven</artifactId>
-            </plugin>
         </plugins>
     </build>
     <profiles>