From b22b3b73e1ac79a0b1014fa4939885a6eb394a45 Mon Sep 17 00:00:00 2001 From: gizmo-rt Date: Tue, 23 Dec 2025 17:29:19 +0530 Subject: [PATCH] Revert "iac security pipeline installation (#337)" This reverts commit d9e9d3de25d6c0a4126c75eddfa292a7f5925f35. --- .github/workflows/iac-security.yml | 50 ------------------------------ 1 file changed, 50 deletions(-) delete mode 100644 .github/workflows/iac-security.yml diff --git a/.github/workflows/iac-security.yml b/.github/workflows/iac-security.yml deleted file mode 100644 index 88d4266..0000000 --- a/.github/workflows/iac-security.yml +++ /dev/null @@ -1,50 +0,0 @@ -name: IaC Security Scan - -permissions: - contents: read - actions: read - security-events: write - -on: - pull_request: - push: - branches: - - main - -jobs: - # Pull Request Scan (soft-fail) - checkov_pr: - name: Checkov Scan on Pull Request - runs-on: ubuntu-latest - if: github.event_name == 'pull_request' - steps: - - name: Checkout repo - uses: actions/checkout@v3 - - - name: Run Checkov (SARIF, soft fail) - uses: bridgecrewio/checkov-action@v12 - with: - directory: . - output_format: sarif - output_file_path: checkov.sarif - soft_fail: true - - - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@v3 - with: - sarif_file: checkov.sarif - - # Main Branch Scan (strict fail) - checkov_main: - name: Checkov Scan on Main (Strict) - runs-on: ubuntu-latest - if: github.event_name == 'push' && contains(github.ref, 'main') - steps: - - name: Checkout repo - uses: actions/checkout@v3 - - - name: Run Checkov (strict) - uses: bridgecrewio/checkov-action@v12 - with: - directory: . - soft_fail: false # fail CI if issues found