ci: clean-up-ignores

yxtay · yxtay · commit 8d6aee77c7fe · 2025-06-01T23:13:22.000+08:00
diff --git a/.mega-linter.yml b/.mega-linter.yml
@@ -13,6 +13,7 @@ DISABLE_ERRORS_LINTERS:
 FAIL_IF_UPDATED_SOURCES: true
 GITHUB_STATUS_REPORTER: true
 PYTHON_DEFAULT_STYLE: ruff
+REPOSITORY_CHECKOV_ARGUMENTS: --hard-fail-on HIGH
 REPOSITORY_KICS_ARGUMENTS: --fail-on critical,high
 REPOSITORY_SEMGREP_ARGUMENTS: --exclude *.lock
 REPOSITORY_SEMGREP_RULESETS: [p/default]
diff --git a/Dockerfile b/Dockerfile
@@ -1,5 +1,4 @@
 # hadolint global ignore=DL3008
-# kics-scan disable=965a08d7-ef86-4f14-8792-4a3b2098937e
 ##
 # base
 ##
