Skip to content

[VULN-649] ci: Remove deprecated scan workflow#7091

Merged
theMickster merged 1 commit into
mainfrom
vuln-649/remove-scan-workflow
Jul 1, 2026
Merged

[VULN-649] ci: Remove deprecated scan workflow#7091
theMickster merged 1 commit into
mainfrom
vuln-649/remove-scan-workflow

Conversation

@theMickster

Copy link
Copy Markdown
Contributor

🎟️ Tracking

https://bitwarden.atlassian.net/browse/VULN-649

📔 Objective

Removes the deprecated scan.yml GitHub Actions workflow.

@theMickster theMickster added the ai-review Request a Claude code review label Jun 22, 2026
@github-actions github-actions Bot added the t:ci Change Type - Updates to automated workflows label Jun 22, 2026
@github-actions

github-actions Bot commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

🤖 Bitwarden Claude Code Review

Overall Assessment: APPROVE

This PR removes the deprecated scan.yml GitHub Actions workflow (Checkmarx SAST and Sonar quality jobs) under VULN-649. The equivalent Checkmarx and Sonar jobs are preserved in scan-ci.yml, which runs on push to main and via manual dispatch. A repository-wide search confirms no remaining references to scan.yml, so this is a clean removal with no orphaned configuration.

Code Review Details

No blocking findings.

Note: scanning cadence shifts from per-PR (old scan.yml used pull_request/pull_request_target) to post-merge on main (scan-ci.yml). This appears intentional per VULN-649 and is an AppSec process decision rather than a code concern.

@theMickster
theMickster marked this pull request as ready for review July 1, 2026 10:58
@theMickster
theMickster requested a review from a team as a code owner July 1, 2026 10:58
@theMickster
theMickster added this pull request to the merge queue Jul 1, 2026
Merged via the queue into main with commit ae76609 Jul 1, 2026
32 of 37 checks passed
@theMickster
theMickster deleted the vuln-649/remove-scan-workflow branch July 1, 2026 17:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ai-review Request a Claude code review t:ci Change Type - Updates to automated workflows

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants