Files
quixotic/.serena/memories/sarif_upload_removal.md
Andrey Kondratev 3fb0d43221 sec fixes
2025-08-29 10:21:18 +05:00

12 lines
610 B
Markdown

# SARIF Upload Removal
## Issue
Docker Security Scan workflow was failing because code scanning is not enabled for the repository and the button to enable it doesn't work.
## Solution
Removed the SARIF upload step from `.github/workflows/security.yml`:
- Removed the "Upload Trivy scan results" step that was using `github/codeql-action/upload-sarif@v3`
- This prevents the workflow failure while keeping the actual Trivy security scanning functionality intact
## Result
The Docker security scan will now run without trying to upload results to GitHub's code scanning feature, eliminating the failure point.