diff --git a/.github/workflows/auto-label.yml b/.github/workflows/auto-label.yml index 912ea88..bd7dee5 100644 --- a/.github/workflows/auto-label.yml +++ b/.github/workflows/auto-label.yml @@ -34,7 +34,6 @@ jobs: - '.github/workflows/security.yml' - '.coderabbit.yaml' - 'SECURITY.md' - - '.gitleaks.toml' config: - 'package.json' - 'tsconfig.json' diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 317df52..5b84dcd 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -55,21 +55,6 @@ jobs: with: config-file: './.github/dependency-review-config.yml' - # Secret scanning with Gitleaks - gitleaks: - name: Secret Detection - runs-on: ubuntu-latest - steps: - - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - with: - fetch-depth: 0 - - - name: Gitleaks Scan - uses: gitleaks/gitleaks-action@ff98106e4c7b2bc287b24eaf42907196329070c7 # v2 - env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - # OSSF Scorecard for supply chain security scorecard: name: OSSF Scorecard