Skip to content

Commit ff0fc94

Browse files
committed
Remove scan dependencies workflow
We're not using these anywhere and instead we rely on GitHub's own security scanning features which means we don't need to maintain our own workflows.
1 parent 0e466b6 commit ff0fc94

File tree

8 files changed

+0
-470
lines changed

8 files changed

+0
-470
lines changed

.github/actions/scan-dependencies/action.yaml

Lines changed: 0 additions & 74 deletions
This file was deleted.

.github/workflows/stage-1-commit.yaml

Lines changed: 0 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -73,22 +73,3 @@ jobs:
7373
fetch-depth: 0 # Full history is needed to compare branches
7474
- name: "Check English usage"
7575
uses: ./.github/actions/check-english-usage
76-
scan-dependencies:
77-
name: "Scan dependencies"
78-
runs-on: ubuntu-latest
79-
permissions:
80-
id-token: write
81-
contents: read
82-
timeout-minutes: 2
83-
steps:
84-
- name: "Checkout code"
85-
uses: actions/checkout@v4
86-
- name: "Scan dependencies"
87-
uses: ./.github/actions/scan-dependencies
88-
with:
89-
build_datetime: "${{ inputs.build_datetime }}"
90-
build_timestamp: "${{ inputs.build_timestamp }}"
91-
idp_aws_report_upload_account_id: "${{ secrets.IDP_AWS_REPORT_UPLOAD_ACCOUNT_ID }}"
92-
idp_aws_report_upload_region: "${{ secrets.IDP_AWS_REPORT_UPLOAD_REGION }}"
93-
idp_aws_report_upload_role_name: "${{ secrets.IDP_AWS_REPORT_UPLOAD_ROLE_NAME }}"
94-
idp_aws_report_upload_bucket_endpoint: "${{ secrets.IDP_AWS_REPORT_UPLOAD_BUCKET_ENDPOINT }}"

.tool-versions

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,6 @@ python 3.13.3
55
# The section below is reserved for Docker image versions.
66

77
# TODO: Move this section - consider using a different file for the repository template dependencies.
8-
# docker/ghcr.io/anchore/grype v0.69.1@sha256:d41fcb371d0af59f311e72123dff46900ebd6d0482391b5a830853ee4f9d1a76 # SEE: https://github.com/anchore/grype/pkgs/container/grype
9-
# docker/ghcr.io/anchore/syft v0.92.0@sha256:63c60f0a21efb13e80aa1359ab243e49213b6cc2d7e0f8179da38e6913b997e0 # SEE: https://github.com/anchore/syft/pkgs/container/syft
108
# docker/ghcr.io/gitleaks/gitleaks v8.18.0@sha256:fd2b5cab12b563d2cc538b14631764a1c25577780e3b7dba71657d58da45d9d9 # SEE: https://github.com/gitleaks/gitleaks/pkgs/container/gitleaks
119
# docker/ghcr.io/igorshubovych/markdownlint-cli v0.37.0@sha256:fb3e79946fce78e1cde84d6798c6c2a55f2de11fc16606a40d49411e281d950d # SEE: https://github.com/igorshubovych/markdownlint-cli/pkgs/container/markdownlint-cli
1210
# docker/ghcr.io/make-ops-tools/gocloc latest@sha256:6888e62e9ae693c4ebcfed9f1d86c70fd083868acb8815fe44b561b9a73b5032 # SEE: https://github.com/make-ops-tools/gocloc/pkgs/container/gocloc

docs/user-guides/Scan_dependencies.md

Lines changed: 0 additions & 73 deletions
This file was deleted.

scripts/config/grype.yaml

Lines changed: 0 additions & 19 deletions
This file was deleted.

scripts/config/syft.yaml

Lines changed: 0 additions & 83 deletions
This file was deleted.

0 commit comments

Comments
 (0)