diff --git a/.github/workflows/sast.yaml b/.github/workflows/sast.yaml deleted file mode 100644 index 484d8e9c..00000000 --- a/.github/workflows/sast.yaml +++ /dev/null @@ -1,31 +0,0 @@ -name: SAST (Static Application Security Testing) - -on: - push: - branches: [master, main, main-private] - pull_request: - branches: [master, main, main-private] - -jobs: - polaris: - name: polaris / code-scan - continue-on-error: true - runs-on: ubuntu-latest - if: (github.repository_owner == 'contentful') && (endsWith(github.actor, '[bot]') == false) - steps: - - name: Clone repo - uses: actions/checkout@v5 - with: - fetch-depth: 0 - - - name: Synopsys Polaris - uses: contentful/polaris-action@master - with: - github_token: ${{ secrets.GITHUB_TOKEN }} - polaris_url: ${{ secrets.POLARIS_SERVER_URL }} - polaris_access_token: ${{ secrets.POLARIS_ACCESS_TOKEN }} - debug: true - polaris_command: analyze -w --coverity-ignore-capture-failure - security_gate_filters: '{ "severity": ["High", "Medium"] }' - fail_on_error: false - report_url: "https://github.com/contentful/security-tools-config/issues/new?title=False%20positive%20in%20Polaris"