finicky9298/quixotic
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sec fixes

Browse Source
This commit is contained in:
Andrey Kondratev
2025-08-29 10:21:18 +05:00
parent 8895639f20
commit 3fb0d43221
7 changed files with 36 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
.serena/memories/sarif_upload_removal.md Normal file
View File

@@ -0,0 +1,12 @@
# SARIF Upload Removal
## Issue
Docker Security Scan workflow was failing because code scanning is not enabled for the repository and the button to enable it doesn't work.
## Solution
Removed the SARIF upload step from `.github/workflows/security.yml`:
- Removed the "Upload Trivy scan results" step that was using `github/codeql-action/upload-sarif@v3`
- This prevents the workflow failure while keeping the actual Trivy security scanning functionality intact
## Result
The Docker security scan will now run without trying to upload results to GitHub's code scanning feature, eliminating the failure point.