Skip to content

Commit af00532

Browse files
committed
fix: Disable DevSkim workflow (too many false positives)
- Changed to manual trigger only (workflow_dispatch) - DevSkim flags SHA3-256 and AES-GCM as vulnerabilities (incorrect) - CodeQL provides more accurate security scanning - Keeping workflow file for future manual runs if needed
1 parent 3b19f44 commit af00532

1 file changed

Lines changed: 4 additions & 11 deletions

File tree

.github/workflows/devskim.yml

Lines changed: 4 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,17 +1,10 @@
1-
# This workflow uses actions that are not certified by GitHub.
2-
# They are provided by a third-party and are governed by
3-
# separate terms of service, privacy policy, and support
4-
# documentation.
1+
# This workflow is disabled due to excessive false positives
2+
# CodeQL provides more accurate security scanning
53

6-
name: DevSkim
4+
name: DevSkim (Disabled)
75

86
on:
9-
push:
10-
branches: [ "main" ]
11-
pull_request:
12-
branches: [ "main" ]
13-
schedule:
14-
- cron: '41 19 * * 4'
7+
workflow_dispatch: # Manual trigger only
158

169
jobs:
1710
lint:

0 commit comments

Comments
 (0)