From 666989f74ce8a80b3d24132393c2e2e331fe719c Mon Sep 17 00:00:00 2001 From: strawberry Date: Fri, 15 Nov 2024 13:19:32 -0500 Subject: [PATCH] delete trivy as lately its been terribly unreliable Signed-off-by: strawberry --- .github/workflows/trivy.yml | 42 ------------------------------------- docs/differences.md | 3 +-- 2 files changed, 1 insertion(+), 44 deletions(-) delete mode 100644 .github/workflows/trivy.yml diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml deleted file mode 100644 index 1f0dd7df..00000000 --- a/.github/workflows/trivy.yml +++ /dev/null @@ -1,42 +0,0 @@ -name: Trivy code and vulnerability scanning - -on: - pull_request: - push: - branches: - - main - tags: - - '*' - schedule: - - cron: '00 12 * * *' - -permissions: - contents: read - -jobs: - trivy-scan: - name: Trivy Scan - runs-on: ubuntu-latest - permissions: - contents: read - security-events: write - actions: read - steps: - - name: Checkout code - uses: actions/checkout@v4 - - - name: Run Trivy code and vulnerability scanner on repo - uses: aquasecurity/trivy-action@0.28.0 - with: - scan-type: repo - format: sarif - output: trivy-results.sarif - severity: CRITICAL,HIGH,MEDIUM,LOW - - - name: Run Trivy code and vulnerability scanner on filesystem - uses: aquasecurity/trivy-action@0.28.0 - with: - scan-type: fs - format: sarif - output: trivy-results.sarif - severity: CRITICAL,HIGH,MEDIUM,LOW diff --git a/docs/differences.md b/docs/differences.md index 6815d248..18ea7a1f 100644 --- a/docs/differences.md +++ b/docs/differences.md @@ -241,8 +241,7 @@ both new users and power users - Fixed every single clippy (default lints) and rustc warnings, including some that were performance related or potential safety issues / unsoundness - Add a **lot** of other clippy and rustc lints and a rustfmt.toml file -- Repo uses [Renovate](https://docs.renovatebot.com/), -[Trivy](https://github.com/aquasecurity/trivy-action), and keeps ALL +- Repo uses [Renovate](https://docs.renovatebot.com/) and keeps ALL dependencies as up to date as possible - Purge unmaintained/irrelevant/broken database backends (heed, sled, persy) and other unnecessary code or overhead