From c266133aaa4b4bed432b0a487c2c56175e313f70 Mon Sep 17 00:00:00 2001 From: Gregor Harlan Date: Mon, 5 Feb 2024 11:18:35 +0100 Subject: [PATCH] Remove sarif report (#5895) --- .github/workflows/sarif-report.yml | 42 ------------------------------ 1 file changed, 42 deletions(-) delete mode 100644 .github/workflows/sarif-report.yml diff --git a/.github/workflows/sarif-report.yml b/.github/workflows/sarif-report.yml deleted file mode 100644 index c5364f14c3..0000000000 --- a/.github/workflows/sarif-report.yml +++ /dev/null @@ -1,42 +0,0 @@ -name: Security Checks - -on: - push: - branches: [main] # bugfix (should be activated when the psalm baseline gets part of the bugfix branch) - schedule: # runs every week at 00:00 on Sunday UTC time. - - cron: '0 0 * * 0' - -permissions: - contents: read - -jobs: - psalm-taint-sarif-report: - name: psalm taint sarif report - runs-on: ubuntu-latest - timeout-minutes: 30 - permissions: - contents: read # for actions/checkout to fetch code - security-events: write # for github/codeql-action/upload-sarif to upload SARIF results - - steps: - - name: Checkout - uses: actions/checkout@v4 - - - name: Setup PHP - uses: shivammathur/setup-php@v2 - with: - php-version: '8.3' - coverage: none # disable xdebug, pcov - - - name: Composer install - uses: ramsey/composer-install@v2 - with: - composer-options: --ansi --prefer-dist - - - name: Create sarif report - run: vendor/bin/psalm --report=results.sarif --use-baseline=.tools/psalm/baseline-taint.xml --taint-analysis --no-cache - - - name: Upload Security Analysis results to GitHub - uses: github/codeql-action/upload-sarif@v3 - with: - sarif_file: results.sarif