From 1ec1af0c655d77e9fa23b24ce2d397abe313812e Mon Sep 17 00:00:00 2001 From: Florent Biville Date: Wed, 13 Dec 2023 15:32:45 +0100 Subject: [PATCH] Remove Trivy integration since we rely on Snyk --- .github/workflows/cve.yml | 29 ----------------------------- 1 file changed, 29 deletions(-) delete mode 100644 .github/workflows/cve.yml diff --git a/.github/workflows/cve.yml b/.github/workflows/cve.yml deleted file mode 100644 index 6afd9538..00000000 --- a/.github/workflows/cve.yml +++ /dev/null @@ -1,29 +0,0 @@ -name: CVE Scanning with Trivy - -on: - push: - branches: [ '**' ] - pull_request: - branches: [ '**' ] - -jobs: - build: - name: Build - runs-on: ubuntu-20.04 - steps: - - name: Checkout code - uses: actions/checkout@v3 - - - name: Run Trivy vulnerability scanner in repo mode - uses: aquasecurity/trivy-action@master - with: - scan-type: 'fs' - ignore-unfixed: true - format: 'sarif' - output: 'trivy-results.sarif' - # severity: 'CRITICAL' - - - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@v2 - with: - sarif_file: 'trivy-results.sarif'