@@ -137,39 +137,6 @@ jobs:
137137 load : true
138138 tags : ${{ env.DOCKER_IMAGE_TAG }}
139139
140- security-scan :
141- name : Security Scan
142- runs-on : ubuntu-latest
143- needs : integration-tests
144-
145- steps :
146- - name : Checkout
147- uses : actions/checkout@v4
148-
149- - name : Build Docker Image for Scanning
150- uses : docker/build-push-action@v5
151- with :
152- context : .
153- push : false
154- load : true
155- tags : ${{ env.DOCKER_IMAGE_TAG }}
156-
157- - name : Run Trivy Scanner
158- uses : aquasecurity/trivy-action@master
159- with :
160- image-ref : ${{ env.DOCKER_IMAGE_TAG }}
161- format : ' sarif'
162- output : ' trivy-results.sarif'
163- severity : ' CRITICAL,HIGH'
164- exit-code : ' 0'
165-
166- - name : Upload Trivy Results
167- if : always()
168- uses : github/codeql-action/upload-sarif@v4
169- with :
170- sarif_file : ' trivy-results.sarif'
171- category : ' container-security'
172-
173140 test-summary :
174141 name : Test Summary
175142 runs-on : ubuntu-latest
@@ -187,7 +154,6 @@ jobs:
187154 echo "| Integration Tests | ${{ needs.integration-tests.result == 'success' && '✅ Passed' || '❌ Failed' }} |" >> $GITHUB_STEP_SUMMARY
188155 echo "| Action Validation | ${{ needs.action-validation.result == 'success' && '✅ Passed' || '❌ Failed' }} |" >> $GITHUB_STEP_SUMMARY
189156 echo "| Docker Tests | ${{ needs.docker-test.result == 'success' && '✅ Passed' || '❌ Failed' }} |" >> $GITHUB_STEP_SUMMARY
190- echo "| Security Scan | ${{ needs.security-scan.result == 'success' && '✅ Passed' || '❌ Failed' }} |" >> $GITHUB_STEP_SUMMARY
191157
192158 # Determine overall status
193159 if [[ "${{ needs.unit-tests.result }}" != "success" || \
@@ -208,15 +174,6 @@ jobs:
208174 echo "" >> $GITHUB_STEP_SUMMARY
209175 echo "✅ **All tests passed!**" >> $GITHUB_STEP_SUMMARY
210176
211- # Add security scan note
212- if [[ "${{ needs.security-scan.result }}" == "success" ]]; then
213- echo "" >> $GITHUB_STEP_SUMMARY
214- echo "🔒 **Security scan completed successfully**" >> $GITHUB_STEP_SUMMARY
215- else
216- echo "" >> $GITHUB_STEP_SUMMARY
217- echo "⚠️ **Security scan had issues** (check results)" >> $GITHUB_STEP_SUMMARY
218- fi
219- fi
220177
221178 # Add debugging info if enabled
222179 if [[ "${{ github.event.inputs.debug }}" == "true" ]]; then
0 commit comments