From 7d86bbfe890b8818c810bbcbc69fd45c18417339 Mon Sep 17 00:00:00 2001 From: Matthew Mattox Date: Thu, 9 Jul 2026 20:47:20 -0500 Subject: [PATCH] chore(ci): remove informational Trivy filesystem scan MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Trivy in ci.yaml scanned the source filesystem (scan-type: fs, scan-ref: .) with exit-code 0, not a built image, and this repo does not publish any image to Harbor (only ghcr.io). The org-wide grype-scan reusable workflow only scans container images, so there is nothing for it to replace here — the fs scan is dropped rather than migrated. --- .github/workflows/ci.yaml | 11 ----------- 1 file changed, 11 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index d747bb3..ef5ecd8 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -178,17 +178,6 @@ jobs: if: always() continue-on-error: true # Don't fail if GitHub Advanced Security is not enabled - - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@master - with: - scan-type: 'fs' - scan-ref: '.' - format: 'table' - exit-code: '0' - ignore-unfixed: true - vuln-type: 'os,library' - severity: 'CRITICAL,HIGH' - e2e: name: E2E Tests runs-on: ubuntu-latest