Skip to content

[VULN-649] ci: Remove deprecated scan workflow#823

Merged
theMickster merged 2 commits into
mainfrom
vuln-649/remove-scan-workflow
Jul 1, 2026
Merged

[VULN-649] ci: Remove deprecated scan workflow#823
theMickster merged 2 commits into
mainfrom
vuln-649/remove-scan-workflow

Conversation

@theMickster

Copy link
Copy Markdown
Contributor

🎟️ Tracking

https://bitwarden.atlassian.net/browse/VULN-649

📔 Objective

Removes the deprecated scan.yml GitHub Actions workflow.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jun 22, 2026

Copy link
Copy Markdown

Deploying contributing-docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: 2b36ae2
Status:⚡️  Build in progress...

View logs

@theMickster theMickster added the ai-review Request a Claude code review label Jun 22, 2026
@github-actions

github-actions Bot commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

🤖 Bitwarden Claude Code Review

Overall Assessment: APPROVE

This PR removes the deprecated scan.yml GitHub Actions workflow (Checkmarx SAST and Sonar quality jobs), tracked under VULN-649. The removal is complete — no remaining references to the workflow, its reusable jobs, or the scanning steps exist elsewhere in the repository. No code or other workflows depend on it.

Code Review Details

No findings. The deletion is clean and self-contained. Removing the pull_request_target-triggered workflow with elevated write permissions reduces attack surface rather than introducing risk.

@theMickster theMickster marked this pull request as ready for review July 1, 2026 11:00
@theMickster theMickster requested a review from a team as a code owner July 1, 2026 11:00
@theMickster theMickster enabled auto-merge (squash) July 1, 2026 13:24
@theMickster theMickster merged commit ed633f7 into main Jul 1, 2026
11 of 12 checks passed
@theMickster theMickster deleted the vuln-649/remove-scan-workflow branch July 1, 2026 13:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ai-review Request a Claude code review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants